Static task
static1
Behavioral task
behavioral1
Sample
124e83f0812629fbc7ee0330002d7e5026b0f79e29a7d42facd62dd67b83549a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
124e83f0812629fbc7ee0330002d7e5026b0f79e29a7d42facd62dd67b83549a.exe
Resource
win10v2004-20240412-en
General
-
Target
acb23245ab5c6d1a478f11f3b58e7cde9032827445ad6ab4dcf99ecddfea88d9
-
Size
31KB
-
MD5
0a54471656cae74df553eca5a477b0cd
-
SHA1
8235d8dcc7a7375c34f271014e1a104c6906adfa
-
SHA256
acb23245ab5c6d1a478f11f3b58e7cde9032827445ad6ab4dcf99ecddfea88d9
-
SHA512
1ea695ea12aa6494a9f6892435e325db890514d4e1f326ef48c9288c69d6a0131f126a1bf0e9957f3df521cf44721823b6abd28e8a1cb98fd11234b49dba75d7
-
SSDEEP
768:s20F3Is9a4hKqhCUBD7DZadbul5dd/7B6kOi/mZAx201d:pida4IqAUBnZ6bul5dZwNi/bX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/124e83f0812629fbc7ee0330002d7e5026b0f79e29a7d42facd62dd67b83549a
Files
-
acb23245ab5c6d1a478f11f3b58e7cde9032827445ad6ab4dcf99ecddfea88d9.zip
Password: infected
-
124e83f0812629fbc7ee0330002d7e5026b0f79e29a7d42facd62dd67b83549a.exe windows:5 windows x86 arch:x86
17a4bd9c95f2898add97f309fc6f9bcd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
ExitProcess
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 374B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ