Static task
static1
Behavioral task
behavioral1
Sample
269562dc0bff0af5abf9a7220378ffbb8b69488661599b282f99910065243f20.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
269562dc0bff0af5abf9a7220378ffbb8b69488661599b282f99910065243f20.exe
Resource
win10v2004-20240802-en
General
-
Target
193b4f1fd83ec4ddaf306354ad362116.bin
-
Size
343KB
-
MD5
b67b7edbeedf73c885507214b2faa9e3
-
SHA1
cb04ce211cd4eaf49ba7a5d5bce7206d321994b7
-
SHA256
91d0a95dc4406895bf95b688897b5c914097565ce6e9cebafcdfc765574eb601
-
SHA512
0df6fe03f9e96087705814708fa4647cb58a9736ea445fa8f55e3d9a87810310bc484700a6c35d09ea6a261063e6edc3e9cf540b4df57d59062204a66bd60aef
-
SSDEEP
6144:1wfHa4KT6gvj8gGhWOWfHdzb4opJLxIorIDyIox717UUJZ6vHKPOtoD:106egvj8gUuN4oznRI2jJZQH4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/269562dc0bff0af5abf9a7220378ffbb8b69488661599b282f99910065243f20.exe
Files
-
193b4f1fd83ec4ddaf306354ad362116.bin.zip
Password: infected
-
269562dc0bff0af5abf9a7220378ffbb8b69488661599b282f99910065243f20.exe.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 672KB - Virtual size: 672KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE