Static task
static1
Behavioral task
behavioral1
Sample
GlassFactoryAssistant_V1_boxed.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
GlassFactoryAssistant_V1_boxed.exe
Resource
win10v2004-20240412-en
General
-
Target
GlassFactoryAssistant_V1_boxed.exe.7z
-
Size
22.0MB
-
MD5
407ad7ba2885be9e4b9c98479be41211
-
SHA1
a995c0e6760095619841cf88ade081be406bc21f
-
SHA256
653a30725f2e4c9bbda0d9dc7f371640b966c12ae19c3e0246067a8c0f70f757
-
SHA512
293d9c48c1dce2aa18480ed7f1d483e4420e0124d37d4e8eb90eb2a33adf745b241f753500f49d1f91fa196e13ecd730258c08ae50b36e1a83a3d53dac849e79
-
SSDEEP
393216:8xPIjU1VYs9LNe5gvyYrsaF4L6UE+/M8dFhrfF0uOsu1mE9hUOAv:MAj09Re5gvyYrx5r8bhTF0Ky4OS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/GlassFactoryAssistant_V1_boxed.exe
Files
-
GlassFactoryAssistant_V1_boxed.exe.7z.7z
Password: infected
-
GlassFactoryAssistant_V1_boxed.exe.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 300B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.eh_fram Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.enigma1 Size: 22.8MB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.enigma2 Size: 256KB - Virtual size: 256KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE