Static task
static1
General
-
Target
3b7f8ea6d98d68edd65a49c922671468.bin
-
Size
1.8MB
-
MD5
ed678711690f06ba887af44de8501bc9
-
SHA1
b4ea454a1406d7820f62f8098c5a25abc4bfce0e
-
SHA256
32cdd8102ecdf973ebede20c517a55bef59c0afe2bfbf3005186a5704c563bdb
-
SHA512
59161eb8052a9ebe52c71b777cfdec390a953b0db374f70252489662b4297f5e938b042a3f52e409fb67f9f80d490750dcf108caa27f97030d286f3a2eb76e4f
-
SSDEEP
49152:iWWTUafmSJWDbPI43QAIR2yeCL4m3eEAYPmS/q:VW9fBJsbgzPOhqmS/q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/eadbad94a4ef1b106f1309fdde748c49d606fc04589fc079853292b0c4ee136f.exe
Files
-
3b7f8ea6d98d68edd65a49c922671468.bin.zip
Password: infected
-
eadbad94a4ef1b106f1309fdde748c49d606fc04589fc079853292b0c4ee136f.exe.exe windows:6 windows x86 arch:x86
Password: infected
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 416KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
omuktmtg Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ojblfcdy Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE