Static task
static1
Behavioral task
behavioral1
Sample
8b76de4bd18371fdc11b923c6ad1056c16d5b24ec28f2c291f362754a36962b8.exe
Resource
win7-20240704-en
General
-
Target
0f6e649713cb19b7cab1cdc80df57009.bin
-
Size
1.8MB
-
MD5
944eaea006cf930573d56f7dc6041761
-
SHA1
2c77e458a9df08e0819cf07ecd228823804aefc4
-
SHA256
467a952fbf8ba326314d764eddf2cde4981caec747898e3fc8c3b03e8fac6035
-
SHA512
95cb763e4d14158089b59ffdae9ebf84994c42b607a77778f1e325220a1ee751060eeb21d049427aa204d9d6c96d128b173a760df2e524ce40b629564c0e4743
-
SSDEEP
49152:S+0atREXgdukwZyMU1w+QYrfXIqpUIrxjx8o4JwOLvU90r:XDREXBXQQYrfXVfxjxIeOB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/8b76de4bd18371fdc11b923c6ad1056c16d5b24ec28f2c291f362754a36962b8.exe
Files
-
0f6e649713cb19b7cab1cdc80df57009.bin.zip
Password: infected
-
8b76de4bd18371fdc11b923c6ad1056c16d5b24ec28f2c291f362754a36962b8.exe.exe windows:6 windows x86 arch:x86
Password: infected
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mitseuwh Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dsajnmtd Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE