Static task
static1
Behavioral task
behavioral1
Sample
ee170a14d676b69cab768f8a94e482ee9ad6dc1766038d6e26c24fe2cfbd7677.exe
Resource
win7-20240708-en
General
-
Target
c6620fe2690605f20f5b9c970e8130c6.bin
-
Size
1.8MB
-
MD5
fc999fd57578c82406978a2523d12c56
-
SHA1
0d7ee26b5a55010633bbf2feafbf9560d97c89a7
-
SHA256
ff2b00ed3dc61e7198831ec100cce0dd5ba653bff33c4e9544370790166c47eb
-
SHA512
e80eea082437d53f04b704ec94a0e00cda6bb69fa89c84116e2c9e2686e97e90ca50521e38a1cf1d3d524d8c9a4e59051ab8ccef8d508f6b38305aa85dc3d8de
-
SSDEEP
49152:zTfCu7y6aRcV1WrAwFC6iVtb7wB80SRM9kLHc:zpsAuCzb7w2m9kI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ee170a14d676b69cab768f8a94e482ee9ad6dc1766038d6e26c24fe2cfbd7677.exe
Files
-
c6620fe2690605f20f5b9c970e8130c6.bin.zip
Password: infected
-
ee170a14d676b69cab768f8a94e482ee9ad6dc1766038d6e26c24fe2cfbd7677.exe.exe windows:6 windows x86 arch:x86
Password: infected
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
etmksbbt Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
iosnleeh Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE