Static task
static1
Behavioral task
behavioral1
Sample
53f9b3b2ea25424baf94da442973f4efd71e1218a3b837600334d97898ebfd7e.exe
Resource
win7-20240704-en
General
-
Target
0f2694844eb16391e15196e17e545f0b.bin
-
Size
1.8MB
-
MD5
fa2340798b31a7392eb908d4a0bde879
-
SHA1
ef9a2a1c781bac2ab777d6bb7b32e8ad9bced240
-
SHA256
9052e399a6d2582f57b57b128ea60969a8a44c2b30b09f636e7d8b4d2514bb0a
-
SHA512
4633853962f2045aa604bcffce11326b52ce3c73da1836288a5c830256313fde80a7fc9fe20dfd1cb2ccbde3a0871d057e456ccb77ba493780b1ffc2e6a5589e
-
SSDEEP
49152:Ss1xtir/m02FIsS85wLNUuDzYcQZKUfeD:pWr/psGmc8eD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/53f9b3b2ea25424baf94da442973f4efd71e1218a3b837600334d97898ebfd7e.exe
Files
-
0f2694844eb16391e15196e17e545f0b.bin.zip
Password: infected
-
53f9b3b2ea25424baf94da442973f4efd71e1218a3b837600334d97898ebfd7e.exe.exe windows:6 windows x86 arch:x86
Password: infected
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wugfyyhr Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mmvmwoim Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE