Static task
static1
Behavioral task
behavioral1
Sample
d3d0eeab1a06460ed303b065248db53d47bfd5c253324b0d2f9efcc2dc700a47.exe
Resource
win7-20240221-en
General
-
Target
9437d6cf2745f8683c3aa908e01b03cf.bin
-
Size
2.3MB
-
MD5
ae9b8d782c9e6986b899ffbefa8d2624
-
SHA1
f6cd25a326141303a5d299ecdc3888343eb8c4e6
-
SHA256
9d696ec499cb9e7b5ce175f577687fae036537e80232997b05d2bf7fdcbfe09b
-
SHA512
aec44a603c483f2618d1a9f69e591898ffe59585e46915b4ccab90f8ca41ebff16197685bf57e00333a88a3e099ba62ba7a75ab82518c15252dc39cc9b0a61da
-
SSDEEP
49152:DSLehIKFvIQAdMiqjc/SqjzC1u3DZFrW57nTaMB3mD1cA:DmeGKFvIQuPqMS+fDnrW57Ow7A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/d3d0eeab1a06460ed303b065248db53d47bfd5c253324b0d2f9efcc2dc700a47.exe
Files
-
9437d6cf2745f8683c3aa908e01b03cf.bin.zip
Password: infected
-
d3d0eeab1a06460ed303b065248db53d47bfd5c253324b0d2f9efcc2dc700a47.exe.exe windows:6 windows x86 arch:x86
Password: infected
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 685KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pobzuwwq Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bxltxemr Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE