Static task
static1
Behavioral task
behavioral1
Sample
cfa2a609e88479751f1494866f9405da6bb8848e495de2ee8c0951f917e9f773.exe
Resource
win7-20240903-en
General
-
Target
83fc40729b5ca77469cd728e6c5e0445.bin
-
Size
1.7MB
-
MD5
f51789b12bcbd6137539aa6f5b8d110c
-
SHA1
65cab02c7ddf44ddb878070efb57fe3da65507d9
-
SHA256
62e271ab6ab2aa0bea628a2c625e328e98e925697d69bc4dad8d322c2ffd3855
-
SHA512
d4d80f53b611dd5b1c356a4d984787c2eec7f6af52a855f951a8d57bbb24800a0b207f3605f40e6d410e68e3faf4f5314c5791978709f6f0263d44fe4e09101f
-
SSDEEP
49152:/cuTdyOQeP381Ts4KSaK2H8cG+8Q3TF2tzEyMOCCQ7bTT:/cfOdP3D4KpK2H8X8p2tIyMOXQrT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/cfa2a609e88479751f1494866f9405da6bb8848e495de2ee8c0951f917e9f773.exe
Files
-
83fc40729b5ca77469cd728e6c5e0445.bin.zip
Password: infected
-
cfa2a609e88479751f1494866f9405da6bb8848e495de2ee8c0951f917e9f773.exe.exe windows:5 windows x86 arch:x86
Password: infected
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 138KB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nnlyixpr Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ztdenyap Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE