Static task
static1
Behavioral task
behavioral1
Sample
ae4c539845660fbb61bd38ca59f3e23b85086d615a52430e2f18aa6633e013d7.exe
Resource
win7-20240221-en
General
-
Target
772864f4649fd320b44ba2265f8e513a.bin
-
Size
2.3MB
-
MD5
7f01d4d11654b3fbd864f203a0d49acb
-
SHA1
92994f3f9cedb52966621d3d83498e242ed94834
-
SHA256
c417812eb5eac61e95cc095d520e419f5502c852b6d7dbd2097b05a563d94395
-
SHA512
4333c6a15eafd8d3ead640ebc60b95c84cc261c2c95088ef8f3ebd84f9bd3fe9561f8dc94ade6efeda169ffc663912e65feac2442e19492dd47637bebbd083d5
-
SSDEEP
49152:J+A8WtLCHrM6WgkQiwPXWiuqQWIWfgH36iLhQChOXS6ui3K52iAyX3a5C87S:Xb2Hr+ghBXuqQzsIVJN6uiAAIa5C0S
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ae4c539845660fbb61bd38ca59f3e23b85086d615a52430e2f18aa6633e013d7.exe
Files
-
772864f4649fd320b44ba2265f8e513a.bin.zip
Password: infected
-
ae4c539845660fbb61bd38ca59f3e23b85086d615a52430e2f18aa6633e013d7.exe.exe windows:6 windows x86 arch:x86
Password: infected
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 685KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
drmuerwf Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nhdorqwx Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE