Static task
static1
Behavioral task
behavioral1
Sample
cf9faf37435fd09cf5aa829fd092b107bf96da722cfc1e8f7aee8d4020fb8f87.exe
Resource
win7-20240221-en
General
-
Target
d1137bf15ec73db305450ca9d065cf0cfb4b2df3461fc603a9c8a9dee199a123
-
Size
780KB
-
MD5
4e0fbbd667916aa2bf9eeffff90327df
-
SHA1
84340afe0eed628ed1ec8f98dd9a6f1df4f0a230
-
SHA256
d1137bf15ec73db305450ca9d065cf0cfb4b2df3461fc603a9c8a9dee199a123
-
SHA512
cc98b877151bb0c138d5714b39021716f596d9e68d5c6673d5137803daa268f1402b0074460703e49d343c297458118875fdf198fac1e6f80cd5453e1b124c1a
-
SSDEEP
12288:EiKgudLD36ujrtHywZ+2CwUAbV/qdWS3juIhvsCf//MftIhajeEP9m:bupNH9+2Ci/Fah3f//MftIhQm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/cf9faf37435fd09cf5aa829fd092b107bf96da722cfc1e8f7aee8d4020fb8f87.exe
Files
-
d1137bf15ec73db305450ca9d065cf0cfb4b2df3461fc603a9c8a9dee199a123.zip
Password: infected
-
cf9faf37435fd09cf5aa829fd092b107bf96da722cfc1e8f7aee8d4020fb8f87.exe.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 143KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 26KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 3.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 617KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE