Static task
static1
Behavioral task
behavioral1
Sample
1bef9ae988709164b0b1daa7d266dcc465dce71ff214bba4cbb4fd81f6a27fdb.exe
Resource
win7-20240903-en
General
-
Target
552afef2f58fb7321b655d08c6b7ac5e.bin
-
Size
1.7MB
-
MD5
2b1da8f4cf15785298986868e2da8747
-
SHA1
b8c7d3444b11d57bb022f895695422051229dde5
-
SHA256
eaa5bd98d869e8786f06178a7f5e200f5936d89d179e6a698ab955b021b43460
-
SHA512
1b1d759e13977f3b516ada5c40d88d9927406986568fadcb8561d884f96b0aefc405f845a1f95512f81f188e014b9485a73f7d2bbb3ed8fbe720f00366f318da
-
SSDEEP
49152:KqA2XDdwhOQ6BW47ZmCOU5iUcBs0KMe6SVaB:6qJQL47LDi9xjvVB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/1bef9ae988709164b0b1daa7d266dcc465dce71ff214bba4cbb4fd81f6a27fdb.exe
Files
-
552afef2f58fb7321b655d08c6b7ac5e.bin.zip
Password: infected
-
1bef9ae988709164b0b1daa7d266dcc465dce71ff214bba4cbb4fd81f6a27fdb.exe.exe windows:5 windows x86 arch:x86
Password: infected
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 79KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jflwpabz Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nwegyxvg Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE