Static task
static1
Behavioral task
behavioral1
Sample
258ecd1cb153a2a450ad5404f7c55a7dea44edb54da650ffa1165d7158dee94b.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
258ecd1cb153a2a450ad5404f7c55a7dea44edb54da650ffa1165d7158dee94b.exe
Resource
win10v2004-20240730-en
General
-
Target
3a8c9f010a87038a151bcee14aed51d5.bin
-
Size
7.6MB
-
MD5
71ce78fe110bcf60906b6bfd8fcbc399
-
SHA1
d877739ef15633f4865505544479916283fe73c8
-
SHA256
96b48a9d276d466dbe69b4ff6a04be7d64aa92d96288f9986e5507ad862121c8
-
SHA512
a89ac3c9d5fdc882df98b5837a27d345f56baf3bbf7513c24a2bcab4868996ba184ecd6e9b202ec2b339ac3822e49d52eda01387ffee5689a3ef58c42646149b
-
SSDEEP
196608:ZM42uquVqXpi8ZZx5yGzmY9SKKdvhcbZuAlWQ5a1:ZM42upUVZZHvxYw5a1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/258ecd1cb153a2a450ad5404f7c55a7dea44edb54da650ffa1165d7158dee94b.exe
Files
-
3a8c9f010a87038a151bcee14aed51d5.bin.zip
Password: infected
-
258ecd1cb153a2a450ad5404f7c55a7dea44edb54da650ffa1165d7158dee94b.exe.exe windows:1 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 584B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ