Static task
static1
Behavioral task
behavioral1
Sample
885e1d96bfbf210d1170054fddd7ec31c4c95ca6951a7be4f8ae3c07d1b9e6de.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
885e1d96bfbf210d1170054fddd7ec31c4c95ca6951a7be4f8ae3c07d1b9e6de.exe
Resource
win10v2004-20240802-en
General
-
Target
885e1d96bfbf210d1170054fddd7ec31c4c95ca6951a7be4f8ae3c07d1b9e6de.zip.bin
-
Size
1.8MB
-
MD5
e9a03ec74b23a77bc56043174a9f4ae9
-
SHA1
1c8b402c131d2b37741d4e64af2386a644467e92
-
SHA256
e5e3263d22fa601d6a843ce3ec563764755ccec102fe2a9fe3493b8ae9eb1958
-
SHA512
4ea29e628d592eca23ee7aea89421f97fe70bbf2837dd5cbb15980d73b5f8f9457a219931c050f4a1f112c12bfc38b6c51a6231e36f90e2f89c2eb445ca03bfd
-
SSDEEP
49152:6Bod6IHHx4NANo6I1zMPEVvHoyDIrsXaULMpehAqtQ5FkyqnDZKFeew7jm:6md66mNAK1wPEtoKW6PJhAqtQgZKlwm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/885e1d96bfbf210d1170054fddd7ec31c4c95ca6951a7be4f8ae3c07d1b9e6de.bin
Files
-
885e1d96bfbf210d1170054fddd7ec31c4c95ca6951a7be4f8ae3c07d1b9e6de.zip.bin.zip
Password: infected
-
885e1d96bfbf210d1170054fddd7ec31c4c95ca6951a7be4f8ae3c07d1b9e6de.bin.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
iulrnrzg Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cqwupthl Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE