Start
Static task
static1
Behavioral task
behavioral1
Sample
db055a26d99b4099e479ece04d49a615012b1348daf167961e67dac100bd17ca.exe
Resource
win7-20240221-en
General
-
Target
e647c3ea87f71adaadad46cdc0bbef89.bin
-
Size
2.1MB
-
MD5
7eafb80040adc8697187e9697036ab51
-
SHA1
3b00c0b8236e44f3a50446ab57345d68f22cd4b6
-
SHA256
d1a5ba05a0653acb1b0f48d02571c01d96fdec8b2791e81088efb9d504f589da
-
SHA512
2da5c424765beed1106ee600f112325b5849b25e681daabae142f46f1d421b6da79cab53b5629cc470b051c4a42472037ae7c52fcd56d5041ab6c24c04ef3c8d
-
SSDEEP
49152:46K0sfbxhVriKQ9zIQMh0sSdUe0EpbkcSVmVXnABeeUf63O3rIE:413dQ9uh0sScubkAZ2ifR38E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/db055a26d99b4099e479ece04d49a615012b1348daf167961e67dac100bd17ca.exe
Files
-
e647c3ea87f71adaadad46cdc0bbef89.bin.zip
Password: infected
-
db055a26d99b4099e479ece04d49a615012b1348daf167961e67dac100bd17ca.exe.exe windows:6 windows x86 arch:x86
Password: infected
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Exports
Exports
Sections
Size: 591KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tjhvfmni Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tjuxqbfz Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE