Static task
static1
Behavioral task
behavioral1
Sample
5d2e043eec8752f58e11b36fc7f3aee1e92f67ead08fef912d74020ecac253db.exe
Resource
win7-20241010-en
General
-
Target
977de0b399bfb24bf9d025e744ee54fc.bin
-
Size
1.7MB
-
MD5
744950a25ca740e926ee437313bc01f9
-
SHA1
4fe27ad0dd55a1a969a64774ce0ed39358cd7c7c
-
SHA256
87310cedd78d60923b95e70651bac7ee14a3ce3dbb9204c5af22d527b757a417
-
SHA512
90aa1d55ed58f9e8e2f9c9ed29e94ae9b6a23f1f7bee526adb68bc72e78dbf3f02d074321ed76518ab290c77e7c789eaf4746ece01266b89b004175257f5f9f5
-
SSDEEP
49152:wblnORG6QZ2K9k1Rasy1haxLOWITObhDHiUUbF1:uORG127u1kxxdUB1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/5d2e043eec8752f58e11b36fc7f3aee1e92f67ead08fef912d74020ecac253db.exe
Files
-
977de0b399bfb24bf9d025e744ee54fc.bin.zip
Password: infected
-
5d2e043eec8752f58e11b36fc7f3aee1e92f67ead08fef912d74020ecac253db.exe.exe windows:5 windows x86 arch:x86
Password: infected
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 138KB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
paleiqnk Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jnklvwmo Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE