Static task
static1
Behavioral task
behavioral1
Sample
1507aa5ff5c2a39351daed1d71ea68d1f069f3f6c4cacd11fffc27173cb6f495.exe
Resource
win7-20240708-en
General
-
Target
5dfa05b60c45476fdd8f39b1e93fc8a1.bin
-
Size
1.7MB
-
MD5
7e1a2ec1ba07a65e60575a6a61d989bd
-
SHA1
0be621a2d4c855ae608a273e3392200b950423c9
-
SHA256
ca4425dd112f9aecd25f2502bc71f78d80de7cc2d508830a16f489ed1dc1a207
-
SHA512
c7e0e3464da2cda93c3d815bc3d9c66ad053982f565b5c0bafc1bb091b820466c7963df86db765523a155b4b191ebe816d9e20371520e85fb2a616f4df1d0992
-
SSDEEP
24576:3Tal4pU1RSHz5N0hBnYXPmpfCQmpgILCvIkAVkHjLrfl1IQP3qUyz2OC2ZBx5lQs:G0U8MXAe/mWIH4fl1JqTZBx/r5Iql
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/1507aa5ff5c2a39351daed1d71ea68d1f069f3f6c4cacd11fffc27173cb6f495.exe
Files
-
5dfa05b60c45476fdd8f39b1e93fc8a1.bin.zip
Password: infected
-
1507aa5ff5c2a39351daed1d71ea68d1f069f3f6c4cacd11fffc27173cb6f495.exe.exe windows:5 windows x86 arch:x86
Password: infected
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 138KB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mdndnfan Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rditnuhz Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE