Static task
static1
Behavioral task
behavioral1
Sample
ff02bcdde4dacb915cc3aefde1936bf0a17e08954982d90157c78cce10c5e225.exe
Resource
win7-20240903-en
General
-
Target
3cef2740575fe83ad6108e6015080102bbfcdff2ea0bc51a0d37dbc774b629f8
-
Size
1.8MB
-
MD5
1c20c14fdc45dd10d31bd5e36ae6714c
-
SHA1
75b6c786577d2b0a4117015eb1ffccbacd23e25a
-
SHA256
3cef2740575fe83ad6108e6015080102bbfcdff2ea0bc51a0d37dbc774b629f8
-
SHA512
f541a6bd7db00b355c4c56696a00d947d0fa4e90abbc2f3487837665a9feb3e80305d144ef4a6f03bebcc1f55480015b7ed76c5f617a564ee74d4357fe1f8777
-
SSDEEP
49152:k8ZWO3q4qbcfjL0KWxYXK2OBK5WUFW7DHg8:fZW6qbcn0UKR2WU8X1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ff02bcdde4dacb915cc3aefde1936bf0a17e08954982d90157c78cce10c5e225.exe
Files
-
3cef2740575fe83ad6108e6015080102bbfcdff2ea0bc51a0d37dbc774b629f8.zip
Password: infected
-
ff02bcdde4dacb915cc3aefde1936bf0a17e08954982d90157c78cce10c5e225.exe.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
afdpsowp Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
loqpciws Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE