Overview
overview
8Static
static
3bypass/data1
windows7-x64
1bypass/data1
windows10-2004-x64
1bypass/data2
windows7-x64
1bypass/data2
windows10-2004-x64
1bypass/data3
windows7-x64
1bypass/data3
windows10-2004-x64
1bypass/data4
windows7-x64
1bypass/data4
windows10-2004-x64
1bypass/dx2...ip.exe
windows7-x64
8bypass/dx2...ip.exe
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
bypass/data1
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bypass/data1
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
bypass/data2
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
bypass/data2
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
bypass/data3
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
bypass/data3
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
bypass/data4
Resource
win7-20240729-en
Behavioral task
behavioral8
Sample
bypass/data4
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
bypass/dx2152wiyce#Sparrow Vip.exe
Resource
win7-20240729-en
Behavioral task
behavioral10
Sample
bypass/dx2152wiyce#Sparrow Vip.exe
Resource
win10v2004-20240802-en
General
-
Target
bypass.zip
-
Size
37KB
-
MD5
112716f619fbfb46c561afce4425a11b
-
SHA1
2b40625ed5621eebcc75a3d97eaaa9a489bb8053
-
SHA256
2c1a9e5052806c1e43cb845dd79723d600b2c654e9ec6668c5396a5e2f2b16d5
-
SHA512
b3d5783709d095152b5b0f477368e922524a60e748c736df197ea7d932688c22f15147e4ef8e59a54f6dd4f78424a0288431f9af7814921fb8d67711fbd3096c
-
SSDEEP
768:2cqJ3EwLyJmkgMnGVnIRz5SiGsMDbGLIh9PI8I3XNeDkAKQDBySjrS:2cDMyJXG+GsI6LIHI13XkDkARoUrS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/bypass/dx2152wiyce#Sparrow Vip.exe
Files
-
bypass.zip.zip
-
bypass/data1
-
bypass/data2
-
bypass/data3
-
bypass/data4
-
bypass/dx2152wiyce#Sparrow Vip.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 62KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 166KB - Virtual size: 166KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ