Static task
static1
Behavioral task
behavioral1
Sample
gFINjJC1uo79uP7.exe
Resource
win7-20240221-en
General
-
Target
XyiVDXAF2K8evjD.rar
-
Size
9.3MB
-
MD5
f65c54f9527a65da1fa598da024c7f05
-
SHA1
9aa5deb1409ce1ce82dc741d086ced65189ed676
-
SHA256
d968f9a727c6da0ceb71e8cfb39a51384ed18131a1f1930fbcebe34812a12c45
-
SHA512
d624c528b1f409893c81c159e73d1c5060a87142db28b3f3a33928fcf01c4e502ff795a50f765a4afcfa65b27e4cb9ec6331d68bd0967942106f13037b139dfd
-
SSDEEP
196608:iyCJHs1sgkJsxe1qF4OzMic5QptEWsbg3axyItZokgRtVsc/ZJ6rd5m:iTM1slsoFOFcmrRF3axyItmkuQu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/gFINjJC1uo79uP7.exe
Files
-
XyiVDXAF2K8evjD.rar.zip
-
??????????.txt
-
INSTRUCTION.txt
-
auth.token
-
gFINjJC1uo79uP7.exe.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 511KB - Virtual size: 895KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 61KB - Virtual size: 150KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 1024B - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 23KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
./\. Size: - Virtual size: 14.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 8.7MB - Virtual size: 8.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 16B - Virtual size: 4KB
IMAGE_SCN_MEM_READ