Static task
static1
Behavioral task
behavioral1
Sample
58a33e0f77235b76006f2d94b21377c3c259afc612cd44df0d707d70645cc194.exe
Resource
win7-20240221-en
General
-
Target
98a30293d97ff1b2f0ce8daaded19581.bin
-
Size
1.7MB
-
MD5
81127eabf61b5d4dd349e193f318513d
-
SHA1
a729b89a84c41242e266d7398f6c915d04d5cb51
-
SHA256
cb94411d255bbaefedc592811fb9c6e3c2739efbdcf9ec98bbe13042a10f5abd
-
SHA512
e8fd4c54c6b44543dcd5a818c3dd9c35112f3ed1ac5a9840ee8d2e6b6178c64eac9510ef0d9a3eb84081e6a9c293d81f6cd57ebb26ab48ad0e1939197eacb7b4
-
SSDEEP
49152:zKdDkFEKY8CS13U0Kc54tr9rgAJODcPXch:zKDktYO13UNd9rgqbvch
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack001/58a33e0f77235b76006f2d94b21377c3c259afc612cd44df0d707d70645cc194.exe
Files
-
98a30293d97ff1b2f0ce8daaded19581.bin.zip
Password: infected
-
58a33e0f77235b76006f2d94b21377c3c259afc612cd44df0d707d70645cc194.exe.exe windows:6 windows x86 arch:x86
Password: infected
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 181KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lspyrcwr Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kruvsquq Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE