Static task
static1
Behavioral task
behavioral1
Sample
03f7b84ec50050cb78882d7d568811f38fdf7586ecf528938d8653829c22cfc0.exe
Resource
win7-20240729-en
General
-
Target
a53a554301475205830875c9f876f132.bin
-
Size
1.8MB
-
MD5
cfa6e47d6fe3efafa37eccb32564b590
-
SHA1
b9cbad7543df0602b1b8ff4047bf2a8e80a0667f
-
SHA256
8ace915bd5331672a0bca49cbeec430282fb240808e4a7444eb51ff1b54f2359
-
SHA512
a84aee3150fb027c2e629138c7fd94348b41ac2475d3f0be5622cf1da09b36676c7fb7e58f4814adaab2417eb3d857f529d63986551cea5487c41ac78c55dc01
-
SSDEEP
49152:fk+bWpxbGanaQ7ADza2j2t0DOl+Y7svs5ESIBi0:3KpxbGDOAC2jkaOkYovg0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/03f7b84ec50050cb78882d7d568811f38fdf7586ecf528938d8653829c22cfc0.exe
Files
-
a53a554301475205830875c9f876f132.bin.zip
Password: infected
-
03f7b84ec50050cb78882d7d568811f38fdf7586ecf528938d8653829c22cfc0.exe.exe windows:6 windows x86 arch:x86
Password: infected
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
abjdpbch Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
egvbbrfa Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE