Static task
static1
Behavioral task
behavioral1
Sample
1382e72f7291c833c917eb25d447bef158bd9dd30738265a117ce6616516b05d.exe
Resource
win7-20240215-en
General
-
Target
6a8ca5d1f3da611072594be9b5265948.bin
-
Size
2.3MB
-
MD5
955c0dba2d18d05275b4a3077927bf19
-
SHA1
baaafd785b28b912b1decc9bd5df944b4b4b76fc
-
SHA256
157ae9f4bc32c3bf1e64011980beaddcd1f9be4357cc0e7f863681a06794c532
-
SHA512
7392b571f3de38d2df9fb3d5ff11accc9f92f9736299224738a9b114fe6e9ed5ce93e1516aa5c48ab7677cc34b4420b1245da7aa68525d2c9746a28003a1ceca
-
SSDEEP
49152:cG2EocZooKUtkbJailfYT/tKGUyfoR1kAP9CwBIXpTJm2/Z83hhAqR7Ul0:cIZooXqnYT1i11kAF2lm2SLAOwS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/1382e72f7291c833c917eb25d447bef158bd9dd30738265a117ce6616516b05d.exe
Files
-
6a8ca5d1f3da611072594be9b5265948.bin.zip
Password: infected
-
1382e72f7291c833c917eb25d447bef158bd9dd30738265a117ce6616516b05d.exe.exe windows:6 windows x86 arch:x86
Password: infected
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 685KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
awlllobu Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pdqtktsa Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE