Static task
static1
Behavioral task
behavioral1
Sample
5c955d0a5c31352f8ddf6ffb1c028495f20dd5a4fed7bfaa9a4434c8eaf52127.exe
Resource
win7-20240220-en
General
-
Target
0e6368e661d4354381c0333916df9dd154dafd157871fd31bcab6d81279f05db
-
Size
780KB
-
MD5
d6c97e9291b8e5b5e6e0299f250527d9
-
SHA1
ffd99f6557ab5d46432dd3900e0e8976f6e39661
-
SHA256
0e6368e661d4354381c0333916df9dd154dafd157871fd31bcab6d81279f05db
-
SHA512
687e3d232821f3ec66398e44d0a9ddc062a6c53ab64f4592a9a68dda636cba0166d5aaad0178b0d66293485a8a4e36f2b2268316bc30fe2e235fe0055f241a03
-
SSDEEP
12288:KhRjxGXlad6IdkCR+kejlO7OI/nfIvjLmkjCr5uj+JNvDn98nAUB4qoinEX6:KhRjAVakIjRxejlyOewLmkji7N798H7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/5c955d0a5c31352f8ddf6ffb1c028495f20dd5a4fed7bfaa9a4434c8eaf52127.exe
Files
-
0e6368e661d4354381c0333916df9dd154dafd157871fd31bcab6d81279f05db.zip
Password: infected
-
5c955d0a5c31352f8ddf6ffb1c028495f20dd5a4fed7bfaa9a4434c8eaf52127.exe.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 143KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 26KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 3.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 617KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE