Static task
static1
Behavioral task
behavioral1
Sample
f03a849ae2d670ff7e468da63c26789b8c738d830a0e49aad3a26ff5bc555805.exe
Resource
win7-20240903-en
General
-
Target
c26fa240909261e0502f8477938318228c7b1d0969418a39ef687a89fcccc336
-
Size
1.8MB
-
MD5
bcb348b597f1dfc80a955f46e6773fa9
-
SHA1
3f6bf40a232b82ce85e2fcb1a259f2577e4fa478
-
SHA256
c26fa240909261e0502f8477938318228c7b1d0969418a39ef687a89fcccc336
-
SHA512
22e57a7067f8c7b5e615fcaaabc0aa3ff4974cbff13798a821e1e3974e3a2662a144924ae75f880d1ea26e24084b663c5dc18a2e32714d159e8cba0fd92a8027
-
SSDEEP
49152:CbJifhZT28LQ36vwvozPoYbVJlNlfvekefMHc:CbJ0hFm6IvoTDVJlSUHc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/f03a849ae2d670ff7e468da63c26789b8c738d830a0e49aad3a26ff5bc555805.exe
Files
-
c26fa240909261e0502f8477938318228c7b1d0969418a39ef687a89fcccc336.zip
Password: infected
-
f03a849ae2d670ff7e468da63c26789b8c738d830a0e49aad3a26ff5bc555805.exe.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
skrrhqch Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nloyssyb Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE