Static task
static1
Behavioral task
behavioral1
Sample
597e094a98f56c0ef8b89cedd7c96d14fca1f5dd25e6e120525246d47de6ba96.exe
Resource
win7-20240221-en
General
-
Target
adb680e5c7586df1d183ad1ef4807648.bin
-
Size
2.2MB
-
MD5
e41111ad5042ff406384fb5310914e8b
-
SHA1
09fb8dc06ce99c7e00d83e16ff251a571a912089
-
SHA256
36bacf801ae630adefe97ce52c7ff11ad0d7c73b0c7f3f6e8f55eba255edf526
-
SHA512
d9e07855ede8ca9a7593b95c6782d69aac11d51daa5bc6cfc4f9d2ee01cc70a9a33d718031075cb41c99b0301284b8ac3f0704c8cfbcb1c440031c80d13e4d7f
-
SSDEEP
49152:UFX8rP1B/1bINO9KIZID5Tp8a0W2KW33xz2hzFrnIpje2Gld49LOQBnMk:UF8z1595ZID5Tp8WhW3hz2h5uhAd49LR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/597e094a98f56c0ef8b89cedd7c96d14fca1f5dd25e6e120525246d47de6ba96.exe
Files
-
adb680e5c7586df1d183ad1ef4807648.bin.zip
Password: infected
-
597e094a98f56c0ef8b89cedd7c96d14fca1f5dd25e6e120525246d47de6ba96.exe.exe windows:6 windows x86 arch:x86
Password: infected
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 680KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rtycizfs Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ybcmmseg Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE