Static task
static1
Behavioral task
behavioral1
Sample
5e25eba0727eb361d518125ef6bad9f834d4c7d91d35edb4b93ee0decaca6c12.exe
Resource
win7-20241023-en
General
-
Target
3204e7adeb4d554e74b4aeb310cc5939.bin
-
Size
1.8MB
-
MD5
d9dcbfae8a10e1cbc23361e7ec9bd681
-
SHA1
e311b5fd75c6a287465e8872c0fcad328a984f34
-
SHA256
fbd1ed1a62ce50967897f23160d670e72a60adc063a1ed227d68c35c72df94ee
-
SHA512
826f6e6aa178cdf719b68f1f3ec4665b8781443f9e9ffc7dd79ecfb44e244cc738d00798ac290320a3781b82b07216a3c7d45fbe4e5352932dbb5fa76fd34744
-
SSDEEP
49152:9rr/j66Tt64M8BAidHzQDFv5CsjT/1SdqHB+904:R766J6EBJQ5MUr1C24
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack001/5e25eba0727eb361d518125ef6bad9f834d4c7d91d35edb4b93ee0decaca6c12.exe
Files
-
3204e7adeb4d554e74b4aeb310cc5939.bin.zip
Password: infected
-
5e25eba0727eb361d518125ef6bad9f834d4c7d91d35edb4b93ee0decaca6c12.exe.exe windows:6 windows x86 arch:x86
Password: infected
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cogqlzgx Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
udlhfeei Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE