Static task
static1
Behavioral task
behavioral1
Sample
3385dbb8cd50c8425830e75c54745dee7ea29b01dd818a5f9191c6111c0e52e6.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
3385dbb8cd50c8425830e75c54745dee7ea29b01dd818a5f9191c6111c0e52e6.exe
Resource
win10v2004-20240508-en
General
-
Target
54729da181b658f25c41055f669106b2.bin
-
Size
215KB
-
MD5
abea79aa683d1f96329b7cf4d4b09aa1
-
SHA1
e37853d50782ac842d40ed46dadf86f7e3766aef
-
SHA256
c2910fcc7a141d1188959b6f38f5df0755b69d73f2dba13b313e7327cc7d10dd
-
SHA512
dad8eb52cef9adad7f413c3978318737035bd774609b90ea3c4ef74ab5f6bfcb35b1d83456da01c9fdd37bd5ae508d1dc486d937cb06afbce20fc05c20e9208b
-
SSDEEP
3072:5Urgl3ISZDGhwfMoiV1UWGmlUPJMjgoawWFBXq6WV+paQIDcM6J0yy5Fmh2UMOa3:icC4GhwgTUslCMcMevjIAshz8FPY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/3385dbb8cd50c8425830e75c54745dee7ea29b01dd818a5f9191c6111c0e52e6.exe
Files
-
54729da181b658f25c41055f669106b2.bin.zip
Password: infected
-
3385dbb8cd50c8425830e75c54745dee7ea29b01dd818a5f9191c6111c0e52e6.exe.exe windows:4 windows x86 arch:x86
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 3.1MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ