Static task
static1
Behavioral task
behavioral1
Sample
a2e2d2eda2840763380435b4e1ec84476d1de5fd4e69efc32aa385910c172a8f.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a2e2d2eda2840763380435b4e1ec84476d1de5fd4e69efc32aa385910c172a8f.exe
Resource
win10v2004-20240704-en
General
-
Target
19a38385f077241168986482aca1745e.bin
-
Size
1.8MB
-
MD5
1c46f3a69b09562e0bf01cab6487f451
-
SHA1
52ebec10a052121b539b24abba14a8d2792a8bcd
-
SHA256
8de152569b88e394aef315ab7e04f6046d8df2f1a0acb8d6efa3430ba10ee149
-
SHA512
e256377d4aa56c3bf512c63480d0316133c30ea4edda165e69425693b7c60b42a81acc1aaf281f9b1fc04de85440842431a05272690cedafa1c7aa608e8aa52f
-
SSDEEP
24576:ivZIG5Q/WddUo5hLoQryARaO5/w/k1KwxhCS+p9yO/nkI/MZjotJl25FSs4cZnX5:iiG5GWZ/rrHJyAbCB9yhfloPlasa5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/a2e2d2eda2840763380435b4e1ec84476d1de5fd4e69efc32aa385910c172a8f.exe
Files
-
19a38385f077241168986482aca1745e.bin.zip
Password: infected
-
a2e2d2eda2840763380435b4e1ec84476d1de5fd4e69efc32aa385910c172a8f.exe.exe windows:6 windows x86 arch:x86
Password: infected
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nrlvqltl Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ehajqpoe Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE