Static task
static1
Behavioral task
behavioral1
Sample
2433781e1bebe673de1a34c94d71372a86342f76d88cce16c47a7a7d9fdce03e.exe
Resource
win7-20240708-en
General
-
Target
5c027273ebe20e1193593a0513c6599c.bin
-
Size
1.7MB
-
MD5
3897d1676910670e0d363e544002f22f
-
SHA1
63e8eb52b8d90656d6aa42f8a749ba35f815e38f
-
SHA256
3360907cd63617cf7e8fc75083bc84d91d33fb020e517ceebac3b5fafb0aefcf
-
SHA512
2427b4517e093f1660a14d2e46b96167056e4959082277684663433088cbc810ab04d2b3dadc72cf842178cc4a463b8ad996b34f46076c888f57edca6bf0f93a
-
SSDEEP
49152:dXvKQYPBmefcZMXRH7LODiMq67/Xy+stLHGOY:1SQIlfeMXRbyDiM/Xy3NS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/2433781e1bebe673de1a34c94d71372a86342f76d88cce16c47a7a7d9fdce03e.exe
Files
-
5c027273ebe20e1193593a0513c6599c.bin.zip
Password: infected
-
2433781e1bebe673de1a34c94d71372a86342f76d88cce16c47a7a7d9fdce03e.exe.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 138KB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ahxdukzk Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bfzzqvqt Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE