Static task
static1
Behavioral task
behavioral1
Sample
0006c038d00e973d7358d7fb306db4a7ff0179656af20e190054bb09db496484.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
0006c038d00e973d7358d7fb306db4a7ff0179656af20e190054bb09db496484.exe
Resource
win10v2004-20240226-en
General
-
Target
c4c641e6dffadc95c82844b6d43b0be6.bin
-
Size
19KB
-
MD5
d643462147ea28c506e8648f9af4c561
-
SHA1
22dba627ccc03e3e8e19632d23f61d7ec21f9146
-
SHA256
895f828c32c581f7bf23244451b521782ae653e7af03e04f6a9511ab5357585b
-
SHA512
67b3cc708518f1cdeb3617ea133a94efe907d04a072990d65b6f8a9e54bcf4a930a8d1e433d3516f64be96c1239f69f1206794b3789a45e5bf1cefa10efa47c3
-
SSDEEP
384:B3pVRc25JvHsyIXeDzuxQfDLUhqCntxz8GvHNCW7BscQ54hd:vH5NHpuxQffmPnbQjHShd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/0006c038d00e973d7358d7fb306db4a7ff0179656af20e190054bb09db496484.exe
Files
-
c4c641e6dffadc95c82844b6d43b0be6.bin.zip
Password: infected
-
0006c038d00e973d7358d7fb306db4a7ff0179656af20e190054bb09db496484.exe.exe windows:3 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 17KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PEPACK!! Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.oapr Size: 174B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ