Static task
static1
Behavioral task
behavioral1
Sample
747ad71951bbc28d848c175e17423a7c38e5b05ebdcc2a1143f45bc7f88f8379.exe
Resource
win7-20240903-en
General
-
Target
c5b5f328f4802f4d26b66e2edad1cf1b206cbbdf2878862c0f1cbe565206ec01
-
Size
1.8MB
-
MD5
b0568b12cad606d6706cf5ea734d9171
-
SHA1
9db849eeaed9087e6e84f2d39823510d219a1111
-
SHA256
c5b5f328f4802f4d26b66e2edad1cf1b206cbbdf2878862c0f1cbe565206ec01
-
SHA512
b724aaf5714f7366c0826ea54ab5ce802f24b412801b81e4d84468a006a4136a2d961d090960d7f4d57b71a3c1f81ac9434907dd494b2350915028fbaec18ba6
-
SSDEEP
49152:r2b5RZ31v4I8AN8u3KivWYuxsp9L/jBXElE6AT3cJRW:r2Hh98fmVrL7Bezi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/747ad71951bbc28d848c175e17423a7c38e5b05ebdcc2a1143f45bc7f88f8379.exe
Files
-
c5b5f328f4802f4d26b66e2edad1cf1b206cbbdf2878862c0f1cbe565206ec01.zip
Password: infected
-
747ad71951bbc28d848c175e17423a7c38e5b05ebdcc2a1143f45bc7f88f8379.exe.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
stxrstif Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rotoflms Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE