Static task
static1
Behavioral task
behavioral1
Sample
8c1d78d0bfa83f6619ca9ed60f59435d1475ca48cbd44028d8bb59522f052694.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
8c1d78d0bfa83f6619ca9ed60f59435d1475ca48cbd44028d8bb59522f052694.exe
Resource
win10v2004-20240508-en
General
-
Target
8c1d78d0bfa83f6619ca9ed60f59435d1475ca48cbd44028d8bb59522f052694
-
Size
2.8MB
-
MD5
7361a2937f30b9cebc888c9d323e61f6
-
SHA1
d8fd6b5235581d58309f63246410f7b3543846d9
-
SHA256
8c1d78d0bfa83f6619ca9ed60f59435d1475ca48cbd44028d8bb59522f052694
-
SHA512
73fb718c00f4034c6edd18d821a74e7cb85e8d565667e3bd859a45615671ed497dc11c4a45601d15d19810687a4f31df2e3b92b6da335040971d482c0df91f4b
-
SSDEEP
49152:k2tztUrwsMNGyojDncwn7UK0PN5NXW5Ao/4hY8gLENbA1sf6sB1SNaXU6NV4:kStYwRoj7fj0HNXc7lEK1q6O1OAG
Malware Config
Signatures
Files
-
8c1d78d0bfa83f6619ca9ed60f59435d1475ca48cbd44028d8bb59522f052694.exe windows:6 windows x86 arch:x86
Code Sign
7b:fc:68:05:37:64:77:af:41:61:13:51:ef:a8:a3:50Certificate
IssuerCN=IndusSinks Software GroupNot Before06/02/2023, 08:00Not After06/02/2024, 08:00SubjectCN=IndusSinks Software Group7d:d9:d5:8f:d6:ba:55:03:e6:23:af:e1:1c:14:cf:5d:26:ea:93:7d:c2:c8:e4:c5:ae:30:ce:04:0f:e7:29:03Signer
Actual PE Digest7d:d9:d5:8f:d6:ba:55:03:e6:23:af:e1:1c:14:cf:5d:26:ea:93:7d:c2:c8:e4:c5:ae:30:ce:04:0f:e7:29:03Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 1.8MB - Virtual size: 9.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 18KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 291KB - Virtual size: 824KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 223KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 69KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qtmetad Size: 403KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE