Static task
static1
Behavioral task
behavioral1
Sample
d8eb4a738486b7393d18ea728adcd7d9c2e270e265c797d790edc951b974273e.exe
Resource
win7-20240220-en
General
-
Target
c05319b9256ce38ae3ad3ea19e2469ae.bin
-
Size
1.8MB
-
MD5
448c1aa4220601d7052ae0dfd0c49a32
-
SHA1
91a3e59547bf5ae890a2f4adcea112dd31b7594f
-
SHA256
0d15751521c3fe8f90dc1877369367f47d92706015ec64aca26ed077e67b916c
-
SHA512
d0e757b0c9354e2be98fb282ce7b69ff4e7f45168b43b3446f06cc2ca353aec351f4c8325a9694fdc253bd809821f3b1659c28161e56c7df3b53206b2c31a4bd
-
SSDEEP
49152:E13xeKVGUaOImoCVNiJHzukBZGWmjN/3Uz///o4+JePz+:E1cRDOnoCVYJzrBZGv6ovAPz+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/d8eb4a738486b7393d18ea728adcd7d9c2e270e265c797d790edc951b974273e.exe
Files
-
c05319b9256ce38ae3ad3ea19e2469ae.bin.zip
Password: infected
-
d8eb4a738486b7393d18ea728adcd7d9c2e270e265c797d790edc951b974273e.exe.exe windows:6 windows x86 arch:x86
Password: infected
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 182KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
olswxtfv Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
puaullcd Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE