Static task
static1
Behavioral task
behavioral1
Sample
888781cacec83eae2a8ea38778dc47d6787ef7bf54f6e05122b9c75a9349c84b.exe
Resource
win7-20240903-en
General
-
Target
36ce95040ed17e3c4ccf84ef67666738.bin
-
Size
1.7MB
-
MD5
a7376a381a2344bb3a5af62a5efc405c
-
SHA1
45c7d5d6755696b5751c5aaefc6890025a570eac
-
SHA256
79e10d4168c0cd67b3f1600a9fc9dd4c6dd1688b2ed53a02c730e4fa40fc92b3
-
SHA512
6dcf5bd1b92e2645ff33969228862323ad3aaef50e1dd40c6aef97b0d2e76e37626dacf8dd391861a1e05b86f3ff2717c23319190e14447f7c0990a938217ecd
-
SSDEEP
49152:BOwTwSJNZfjOdnZ43K2lU1tnhNm285PcayJFDPGRr:BnVNZQ66J7Lm285PcayYr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/888781cacec83eae2a8ea38778dc47d6787ef7bf54f6e05122b9c75a9349c84b.exe
Files
-
36ce95040ed17e3c4ccf84ef67666738.bin.zip
Password: infected
-
888781cacec83eae2a8ea38778dc47d6787ef7bf54f6e05122b9c75a9349c84b.exe.exe windows:5 windows x86 arch:x86
Password: infected
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 90KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 428B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bpqkjsvj Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nfefccxc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE