Static task
static1
Behavioral task
behavioral1
Sample
c427e85ef5de0ae057dd4c3c9411597c0eeb2e069dd1f70bb63d7969ef6bd445.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c427e85ef5de0ae057dd4c3c9411597c0eeb2e069dd1f70bb63d7969ef6bd445.exe
Resource
win10v2004-20240412-en
General
-
Target
bc7b57e90771ae37bc8301205fd1dd7c6981c7c39ffa303fbefae53e5fbd6389
-
Size
323KB
-
MD5
126e606b93df999dc9f0823bbae17b7f
-
SHA1
05f68efaeaf589768de3357389d456f4bd537534
-
SHA256
bc7b57e90771ae37bc8301205fd1dd7c6981c7c39ffa303fbefae53e5fbd6389
-
SHA512
2036c99db001899f2aef1dda1c26c05e64351ac292a101f8cd916ef894600d7480ae30a6b40c667987b3bd15bcee12caeb80ae2ed0b9366316f5dec49715d4dd
-
SSDEEP
6144:neTA2twB4WXS4AXw00JtU7HO9aO3k3CxxHJpAXfbOtfq:n72CBa4Ar03WiastxFIqtS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/c427e85ef5de0ae057dd4c3c9411597c0eeb2e069dd1f70bb63d7969ef6bd445.exe
Files
-
bc7b57e90771ae37bc8301205fd1dd7c6981c7c39ffa303fbefae53e5fbd6389.zip
Password: infected
-
c427e85ef5de0ae057dd4c3c9411597c0eeb2e069dd1f70bb63d7969ef6bd445.exe.exe windows:6 windows x86 arch:x86
01872e6ee81c2a9c5c63c0d52462fa63
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetStdHandle
QueryPerformanceFrequency
user32
GetDC
ReleaseDC
gdi32
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
DeleteDC
DeleteObject
GetDIBits
GetDeviceCaps
GetObjectW
SelectObject
Sections
.text Size: 385KB - Virtual size: 385KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 136KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 77KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ