Static task
static1
Behavioral task
behavioral1
Sample
7f7ab62446251c1fec500e70705d6840c982351dfd8303e0ca5ddf0e40c2f6fc.exe
Resource
win7-20240705-en
General
-
Target
69a44afd5f25f695f1e1fe16abf56a39.bin
-
Size
1.7MB
-
MD5
7aa143518ce0518f237ce0e141acd413
-
SHA1
313f2369e8b96a0ceef6e495a0e658a521c75eda
-
SHA256
8e5ddaad790b38b7aad167fa9c45ab0ceaeee04b3f6541225973dc2588fddc16
-
SHA512
43d22da83d3e616060ec5b0e0e18af75bcdc4e53939fb5dd98fbea99c7f98f96941309b184acb9fe116c7fa85ce346429f00385e6fcaeff57e63aa87b452c838
-
SSDEEP
49152:DdwxxF2ojaYfgwEIAhCCRngjtdImIIMTZ0YLriPmFSh5qwR+N3:DUF2oj5pEIAbngrdI5xLriEN3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/7f7ab62446251c1fec500e70705d6840c982351dfd8303e0ca5ddf0e40c2f6fc.exe
Files
-
69a44afd5f25f695f1e1fe16abf56a39.bin.zip
Password: infected
-
7f7ab62446251c1fec500e70705d6840c982351dfd8303e0ca5ddf0e40c2f6fc.exe.exe windows:5 windows x86 arch:x86
Password: infected
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 79KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cwrvobrg Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
olxkocyk Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE