Static task
static1
Behavioral task
behavioral1
Sample
9317b080a46c8009a452acaa25a031016f6c0cbb554370aa49a7e821ef3223da.exe
Resource
win7-20241010-en
General
-
Target
15c96951fa1d9a5e5501febda1d62d5d.bin
-
Size
2.0MB
-
MD5
c4ddcfd886411ea0cf3e7aa5d79c82e3
-
SHA1
b4756da54e75b3bc5b46bd315ff9e2a75316ca4a
-
SHA256
13ac0a9e1afa5ba0d192b6a62795ac1ad6aadc0b03b1750801d18c6f9b0f0a69
-
SHA512
7c86e190642ca5bc3e88884f95571f15d35f1081294bde5a11be2ce9a7a0e9ff7fbecfee4d3b735ea7e2c1ae37359a580720df38c1c21608f1dec83fb153a6c6
-
SSDEEP
49152:fI00S8IPQOi/5CWTLMwButvakOiow1bAYBjM1xxeBZl:D0SFoOirnMwEtzOiDbAYe1xEJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/9317b080a46c8009a452acaa25a031016f6c0cbb554370aa49a7e821ef3223da.exe
Files
-
15c96951fa1d9a5e5501febda1d62d5d.bin.zip
Password: infected
-
9317b080a46c8009a452acaa25a031016f6c0cbb554370aa49a7e821ef3223da.exe.exe windows:5 windows x86 arch:x86
Password: infected
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 413KB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zjcucodm Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
elkczxzq Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE