Static task
static1
Behavioral task
behavioral1
Sample
asd/HackLoader.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
asd/HackLoader.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
asd/asd.exe
Resource
win7-20240729-en
Behavioral task
behavioral4
Sample
asd/asd.exe
Resource
win10v2004-20241007-en
General
-
Target
d9b0a9c06e7fac14fc3891a4378bccd424998a7c71c193ca4cf5062e6975f7b7
-
Size
1.9MB
-
MD5
3d9b5964bde8a0af79fa67f50d1c14ea
-
SHA1
2ab618c2eb116cc0d482d3133e152e49a0245b67
-
SHA256
d9b0a9c06e7fac14fc3891a4378bccd424998a7c71c193ca4cf5062e6975f7b7
-
SHA512
312e889ee670969bd513178ace2ba862a00610892bd482b555df79a7def7f776a4943da9dca79de9a0e6aae287dd94154c10f3afc37593ce403134ea347b8100
-
SSDEEP
49152:y5Vapp/+VqKzZkn/obBS9n9uy6QRxs93yfcpkUPEK/zFeNOlm:X/+Vqmkn/ob2nf6ywia7NY0lm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/asd/asd.exe
Files
-
d9b0a9c06e7fac14fc3891a4378bccd424998a7c71c193ca4cf5062e6975f7b7.zip
-
asd/HackLoader.dll
-
asd/asd.exe.exe windows:4 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 57KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fzlokrxn Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pruxdgdq Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE