Static task
static1
Behavioral task
behavioral1
Sample
00a10d07277a7230bf72e4a77a4fd0a7b7b8d031e671e16432f7838676cb2456.exe
Resource
win7-20240704-en
General
-
Target
686443cb145ea6d01fbe1e0e329a6ba3.bin
-
Size
668KB
-
MD5
f68f24327d331cc7750957e20e04f5d9
-
SHA1
2cda6ce89e426898dcf248d83f90302747aa1a9e
-
SHA256
f798e462c7bc04aada632b20a3edf251ac5df1be4e3f642c1a9b3843a971bb4e
-
SHA512
5b05f690d9ff9fc790eeaa87b8b9eed80095fe1cea39472dac10bcd22d958e2adc2c6004b255edb50273b95cf912321f4a28945d998195745121e724ebd67675
-
SSDEEP
12288:SoOIHu78hB3Jr0+7deY8OrcaHYn8BS173vGgNltNwPGdkZdtEZAAIZz:SoOIOOB3Rx/8oHC3vGsgEkpEZALz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/00a10d07277a7230bf72e4a77a4fd0a7b7b8d031e671e16432f7838676cb2456.exe
Files
-
686443cb145ea6d01fbe1e0e329a6ba3.bin.zip
Password: infected
-
00a10d07277a7230bf72e4a77a4fd0a7b7b8d031e671e16432f7838676cb2456.exe.exe windows:5 windows x86 arch:x86
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 43KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 26KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 3.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 607KB - Virtual size: 608KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE