Static task
static1
Behavioral task
behavioral1
Sample
HAWB AND INV.exe
Resource
win7-20241010-en
General
-
Target
587dbf96979d7f8de55234e0b9c2f41332ecbfcbe9260b5ed2ddca34bfbc4391
-
Size
676KB
-
MD5
69d56c80ff5b930a05f94752415affa9
-
SHA1
a1f99148e6d121cfd4fa4de2d78df4476cb375ab
-
SHA256
587dbf96979d7f8de55234e0b9c2f41332ecbfcbe9260b5ed2ddca34bfbc4391
-
SHA512
1d9ebec2d56dfe341a2ea1bf897552d329127b0949c39733ca9d42433f2b00599f05b1ab7b9fb577bd2d96565cff6d8cd40dd3d05e04a8b356e5b6a12b55c3a5
-
SSDEEP
12288:Vo2H3ngytUEeYiUibVXaGOFqd5OAQ7TdgPjrRHsR0F1Xt50WcFlKkNYQB:GgthzwCFqLOAQ1IRxdt5iFl9CQB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack003/HAWB AND INV.exe
Files
-
587dbf96979d7f8de55234e0b9c2f41332ecbfcbe9260b5ed2ddca34bfbc4391.zip
Password: infected
-
935db04a321004649fe23b1506172a80e35f9cb738d5544032cdfc10d1d980a1.ace
-
out.ace.ace
-
HAWB AND INV.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 719KB - Virtual size: 718KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ