Static task
static1
Behavioral task
behavioral1
Sample
753b0e5c394f463e9497e2f396f45c51447984bf3682222aaec0e6247c2b442c.exe
Resource
win7-20240903-en
General
-
Target
245c81512eb09539e1b3de0f7ae3353c.bin
-
Size
1.7MB
-
MD5
5c687e01d5f1f6ad5e424e4ecffaef8d
-
SHA1
baed8a2ea923aafd4de9024fde39b1e115d9b270
-
SHA256
4c36e0283c5d27fb2b9dcd9731165f32a0530062ea9b509bf4e9ca0decaf168e
-
SHA512
bb8e1e08730f3befa328b02c89f31328f2ccc12cdb393c17743114f0355c87d1641df384c9a694bd76937b2b322a2473951632f3dee15e4babddc9c3175cae6e
-
SSDEEP
49152:V8XaVew527gBjkSgp3FdsuS0+5I+sFOb9+UCCxHZxkUIAbSM:V8KED7OoH1dGI1fIxHZbJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack001/753b0e5c394f463e9497e2f396f45c51447984bf3682222aaec0e6247c2b442c.exe
Files
-
245c81512eb09539e1b3de0f7ae3353c.bin.zip
Password: infected
-
753b0e5c394f463e9497e2f396f45c51447984bf3682222aaec0e6247c2b442c.exe.exe windows:5 windows x86 arch:x86
Password: infected
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 88KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jyvctjiv Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mtpvaurb Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE