Static task
static1
Behavioral task
behavioral1
Sample
9617ea9b776a3c294f2adffa1d3e2953cfbf301a03ad02c0568897e9e0e61968.exe
Resource
win7-20240903-en
General
-
Target
77f3c811d457b9cd9d60718f6df48043.bin
-
Size
1.6MB
-
MD5
2e3fa76f5829e60e7a2d476a94fab96d
-
SHA1
e54f0f3850e9d951f9aa0e3f91a059549cd6f1d6
-
SHA256
5e6947e488aaf500722c59f8c7d7c5062b10a5409515f8414065cb9e4ae61047
-
SHA512
03605b6a1c864a3dbc8bb25dcf68bd172e889c35df42c529cc470e4656a5865c89b4383eec469c6788ce308cc8bb44f58485dbf0be51ec23ba08f8de0bfffa9c
-
SSDEEP
49152:+4wOHyOOy/u/Q48BU3ruLZP5BuiYdU4wdtrSauAy7I:5mOOvL3yLFumNyauc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/9617ea9b776a3c294f2adffa1d3e2953cfbf301a03ad02c0568897e9e0e61968.exe
Files
-
77f3c811d457b9cd9d60718f6df48043.bin.zip
Password: infected
-
9617ea9b776a3c294f2adffa1d3e2953cfbf301a03ad02c0568897e9e0e61968.exe.exe windows:4 windows x86 arch:x86
Password: infected
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
lstrcpy
Sections
Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
biqtvfxe Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
oqjvaulw Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE