Static task
static1
Behavioral task
behavioral1
Sample
24e9b9d968e9fe8a57181b4dba9ccc254308b3fd5aa642a053d99fe3c9e63684.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
24e9b9d968e9fe8a57181b4dba9ccc254308b3fd5aa642a053d99fe3c9e63684.exe
Resource
win10v2004-20240426-en
General
-
Target
93ed03f6a77167421ecb22b4e9c54a27.bin
-
Size
78KB
-
MD5
411aea9ce5766aa044a456874460e537
-
SHA1
df4ec4f1618346b9e325727da6fc5de1352af29d
-
SHA256
42a77387b9094e3af093ac1505b1bb2ebee4b3d2b655318c04af707e2ae0c773
-
SHA512
e1875d98b04036b423cf33170fd06ab907badfa1b1b72f66d1b00248c94c17c76bee1fe53fd3debbffe0667a6166b95f5d07fb730a67217a6823ba0ac5d19297
-
SSDEEP
1536:lc8qUNHq2JsqDsa3a1GCtI640x84M9L0wzFl/dba0UXiJri+0:lc8XPJVJ3xCtPAF9LrF5EFx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/24e9b9d968e9fe8a57181b4dba9ccc254308b3fd5aa642a053d99fe3c9e63684.exe
Files
-
93ed03f6a77167421ecb22b4e9c54a27.bin.zip
Password: infected
-
24e9b9d968e9fe8a57181b4dba9ccc254308b3fd5aa642a053d99fe3c9e63684.exe.exe windows:1 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.clam01 Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.clam02 Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.clam03 Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.clam04 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.clam05 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE