Static task
static1
Behavioral task
behavioral1
Sample
219ea8880bc0853180b43fd8bf674b81e1de1f73b4dc75f328023500482148ea.exe
Resource
win7-20240221-en
General
-
Target
d3506cf793362954f36b7e91edf27871.bin
-
Size
1.8MB
-
MD5
fcfb7a286a2c08b6e54b42c1177fe3eb
-
SHA1
9f4c5c3f0963c4d64a104d1a58d09164a8de695c
-
SHA256
2954f51dcb1383912cbfff14f8687b1593b5b8948ea360f99f34d84e8441e926
-
SHA512
a0bb5fe37a554a4eca3301bb62ea5432900ad2c91aff10a90c86d917b5097d72b6497c1f1d7c46508f156b2c23ba9dd249bbba40f27c710c4368aff415e647e8
-
SSDEEP
49152:kJsHf7TGFd2Hckl/vH9B0K6Ou10mmvQWkh:9HydhkR30KL3mGE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/219ea8880bc0853180b43fd8bf674b81e1de1f73b4dc75f328023500482148ea.exe
Files
-
d3506cf793362954f36b7e91edf27871.bin.zip
Password: infected
-
219ea8880bc0853180b43fd8bf674b81e1de1f73b4dc75f328023500482148ea.exe.exe windows:6 windows x86 arch:x86
Password: infected
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mohhxrbk Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ljvafzcj Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE