Static task
static1
Behavioral task
behavioral1
Sample
ded5a181286b7bf7971993b0392ee15dec6d42f4b48f5356b3b89d9f2aed48d9.exe
Resource
win7-20240903-en
General
-
Target
41e1b89657936a9f325d226251164e1b.bin
-
Size
1.7MB
-
MD5
1c9f1e343dbe6e903c16725ed6352c42
-
SHA1
d22d8bda95e8f00c65473cf276f55377bc1eeba0
-
SHA256
ab377eaf22c6c3075e1acbac9298783a47668f4d05d0cbd5f0e5612012709161
-
SHA512
0624b35aba24317c398214f046803c96fc7ef5e36c1436f8ff4a3d7b6bd3e68eb05a4e175fb29a20afc067dbd299e8024d1345e7e4502143009a090a16c240bf
-
SSDEEP
49152:exZCn7XhJ/h1Rb34aQ84dKiNoep/BBUaS:exZOJ/hTboaQtMUAaS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ded5a181286b7bf7971993b0392ee15dec6d42f4b48f5356b3b89d9f2aed48d9.exe
Files
-
41e1b89657936a9f325d226251164e1b.bin.zip
Password: infected
-
ded5a181286b7bf7971993b0392ee15dec6d42f4b48f5356b3b89d9f2aed48d9.exe.exe windows:6 windows x86 arch:x86
Password: infected
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 836B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dyzyaodg Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lklgfxsx Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE