Static task
static1
Behavioral task
behavioral1
Sample
98ce0d502c6cf196a771a1110c59d8d0b07fdf0b8b43c8b3d810b9e727b56873.exe
Resource
win7-20240508-en
General
-
Target
f8401c95a41f0f00810cd832dca818d0.bin
-
Size
1.3MB
-
MD5
5d3a5ffd2291212090b9f3aa0ebbc127
-
SHA1
026b294db6cab043bab407eeaf278eea7a7bf05c
-
SHA256
f0379d733e1dd44e93e18206f80d21d4c01fcd86d310f608d19bf62563536a0d
-
SHA512
2bb28057cec052e8dd770be65d49d406ba31e21b62d65b4d7de097a0d22c00bc10c3b14ec005b50dc24c4b3e942b7476c5538848fdcfa7d909761ea54c7806a0
-
SSDEEP
24576:weRclleswBt5fu2dQ158fW3pFakOdCK+Vbp50bILFf0lmGMwQlQHVXGmKQl:HezejBt5GoACuZFa0KWbp50Q56bl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/98ce0d502c6cf196a771a1110c59d8d0b07fdf0b8b43c8b3d810b9e727b56873.exe
Files
-
f8401c95a41f0f00810cd832dca818d0.bin.zip
Password: infected
-
98ce0d502c6cf196a771a1110c59d8d0b07fdf0b8b43c8b3d810b9e727b56873.exe.exe windows:6 windows x86 arch:x86
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 591KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 3.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 630KB - Virtual size: 632KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE