Static task
static1
Behavioral task
behavioral1
Sample
a6185bddf317cf27a75ebcf7ed2d7b189aff01603ab693b35e995aef764371ed.exe
Resource
win7-20241023-en
General
-
Target
c397e978a38f01d85301edc20e042bd0.bin
-
Size
1.8MB
-
MD5
c2e676659c584cc0b4b52997564cf321
-
SHA1
44910cc501349e1f9c3409bdb320367b118f18fa
-
SHA256
a4ae13ee49c0a41b41a0831d66c564a619e6a2dc2a40687ac5999b9c8b0c7fc1
-
SHA512
586de7c72cdeefd896e9ff31caced3994691ba314dd0a1697d463e1a8252b8106d9add2f9b234baf47aaea58c04373957ddcf45a88e9e3b3a3d34613fa76c96d
-
SSDEEP
24576:0RiWVYjZk3pq6aMCpzTOstGzEvzaKtbd/NmoaOy+gc7cudV1Kr0YHNc+qet9TLgk:wVYjYpqD/ODiuKtB/NmBE1Qc+XtAQ5l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/a6185bddf317cf27a75ebcf7ed2d7b189aff01603ab693b35e995aef764371ed.exe
Files
-
c397e978a38f01d85301edc20e042bd0.bin.zip
Password: infected
-
a6185bddf317cf27a75ebcf7ed2d7b189aff01603ab693b35e995aef764371ed.exe.exe windows:6 windows x86 arch:x86
Password: infected
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 416KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bkcxmelv Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mwsruvaf Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE