Static task
static1
Behavioral task
behavioral1
Sample
6362084f61fa6a41b8b01b7c62215ad41a2623b69572ce558c33bffaa21f0af9.exe
Resource
win7-20240221-en
General
-
Target
028dc43c9a2a73a6f1b115ec690b8cc9b188b4bd48668892571561e2611eea20
-
Size
119KB
-
MD5
65ce10fd90c066d74fbbabe2dda0d0a1
-
SHA1
f042c47933bb6d344ab6c5046a148a45210d92af
-
SHA256
028dc43c9a2a73a6f1b115ec690b8cc9b188b4bd48668892571561e2611eea20
-
SHA512
ac74639ed579ca9f4aa936d94f0cba02cbbcf1761c28dd82dd0a58eef3ad0e198a359523446528b218d4ecd4c925858788db74b4dd322ce22c69d54c4d4e5f8a
-
SSDEEP
3072:VmCjFoK8/eWiw51CZiCurSngB8UWJMGLMSEiW:BRWiwPCQCzgd0ASEiW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack001/6362084f61fa6a41b8b01b7c62215ad41a2623b69572ce558c33bffaa21f0af9.exe
Files
-
028dc43c9a2a73a6f1b115ec690b8cc9b188b4bd48668892571561e2611eea20.zip
Password: infected
-
6362084f61fa6a41b8b01b7c62215ad41a2623b69572ce558c33bffaa21f0af9.exe.exe windows:5 windows x86 arch:x86
67a36dd1932b24ae6e480a39581ed178
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
TrackMouseEvent
ExcludeUpdateRgn
gdi32
GetColorAdjustment
clusapi
GetClusterFromResource
kernel32
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SleepEx
FindNextVolumeMountPointW
QueryIdleProcessorCycleTime
Sleep
SetEndOfFile
LocalAlloc
GetModuleHandleW
RtlUnwind
TerminateProcess
GetCurrentProcess
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 84KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ