Static task
static1
Behavioral task
behavioral1
Sample
b0b39f058a958778b15a5c4589a2938d.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
b0b39f058a958778b15a5c4589a2938d.exe
Resource
win10v2004-20240508-en
General
-
Target
a96181997bfe6e3dea689a9f8ca59f04edd352fe1c6993d0334fecc9d6ff28f5.7z
-
Size
53KB
-
MD5
faff1af2d98739068bfbb21a52d74fb3
-
SHA1
31e712c76e5406c9aaaf3ad1e9ae3c98d14a85cf
-
SHA256
a96181997bfe6e3dea689a9f8ca59f04edd352fe1c6993d0334fecc9d6ff28f5
-
SHA512
6ec0f4f7fd0ecd5a3919a1caad0ff6c89d93041b7be8b8b6027a731aa7a976991a6b3687a1fff2b8bb46c383267982681569209489399fcdf892942b776235be
-
SSDEEP
768:I/z7Xq60EJI3ZqCCqDHj8cnSZREGdqMN0XDTUsSfIuInJHG7cUt5HZuH7Ne:27Xqr3zD8IST3QVYCWcwQe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/b0b39f058a958778b15a5c4589a2938d
Files
-
a96181997bfe6e3dea689a9f8ca59f04edd352fe1c6993d0334fecc9d6ff28f5.7z.7z
Password: infected
-
b0b39f058a958778b15a5c4589a2938d.exe windows:4 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE