Static task
static1
Behavioral task
behavioral1
Sample
6800cb56d8bcd50e6380d8c3e3acb932923c7b2db5046370b7564ef439502ea0.exe
Resource
win7-20240903-en
General
-
Target
c57aa72ced3f3b2b7a9bb383ca178525.bin
-
Size
2.0MB
-
MD5
d7badfb8a856ebbe4225d3ef2b0605f1
-
SHA1
464c01f999ab17ed904489b139d2866b842ab972
-
SHA256
7ad1dc152cbcceb382ce7e4b739a794463a074e3fc4488897fb4e2449c7e90d1
-
SHA512
26954c32159f944fe7122c0babe2ac4bf4016b14c247e27e753eda9f7b349e996fb0794e077a0f0bfa548e81c7723155b1357cee0d044986f417633c340246ab
-
SSDEEP
24576:I8kHq9m1hlgxKhcAPz28gH6+jptyJo0+dSsvqrT4/OMYb982Q1+79gmrHUeNsWOM:I8kK6lgkvPwduoqrj9+1k95UeNyY+UN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/6800cb56d8bcd50e6380d8c3e3acb932923c7b2db5046370b7564ef439502ea0.exe
Files
-
c57aa72ced3f3b2b7a9bb383ca178525.bin.zip
Password: infected
-
6800cb56d8bcd50e6380d8c3e3acb932923c7b2db5046370b7564ef439502ea0.exe.exe windows:5 windows x86 arch:x86
Password: infected
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 413KB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
droycdcd Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wlvqhija Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE