Static task
static1
Behavioral task
behavioral1
Sample
9d15aefd953e3b02812f0fd4f5e1e84356bc28a7ec904c0398581b97b1b96d82.exe
Resource
win7-20240903-en
General
-
Target
2093c6e52262aba12a530a15eb025af1.bin
-
Size
1.9MB
-
MD5
3f61dc3355cf8a07db8a1e1a056e4e98
-
SHA1
595a5d35e8808b686025f02d83e2251eed051d7b
-
SHA256
e1d556951891845e33f2f459863d740f2d4fd9d6bdc0f6a721eca1c0c9f0a9c3
-
SHA512
7f19f65da20f75648b61205c407e56991023b04567c9944cb96353ada44e858562f56747a017c1a36dc00e9c23263f74584aa9b9d9d2bb815ecf2b8cbfe2b14a
-
SSDEEP
49152:8w/D6SOJwtLnEbE/yJBBB4sjvqilH+jygZ8dgMBzvt:846S/bEbjJB5SGHuTYPpvt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/9d15aefd953e3b02812f0fd4f5e1e84356bc28a7ec904c0398581b97b1b96d82.exe
Files
-
2093c6e52262aba12a530a15eb025af1.bin.zip
Password: infected
-
9d15aefd953e3b02812f0fd4f5e1e84356bc28a7ec904c0398581b97b1b96d82.exe.exe windows:5 windows x86 arch:x86
Password: infected
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 413KB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ocwxryid Size: 1.5MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
emfqoabf Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE