Static task
static1
Behavioral task
behavioral1
Sample
ade74f94d8a756fe9759809ce90cb5c3d6320f1e673017c6a8fbc79713fadf1f.exe
Resource
win7-20240903-en
General
-
Target
44d829be334d46439bddc6dfab13a937.bin
-
Size
4.2MB
-
MD5
8548b71a65609c7d8949316c516db5af
-
SHA1
2addfb175151d1157519c97a905a21b4c83b75f7
-
SHA256
2add2657194654a19f5da1215ae20ccdcd83ae4d28f58116f971def5ce2fe68b
-
SHA512
1e67036b03f0cf33d9c0f496b8cda8bb44931378b28ee2af9c3903eb20b94c2b3c7ab27c878d12c91777117b80d252082f6eec7365525c546b74f631f7813d8e
-
SSDEEP
98304:oacmBgOl6MYSO6f8BNGNo81U4w9A3vlPH3NAVHl/PV3go19:/b5f8zjg7YOhHAF/9Qoj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ade74f94d8a756fe9759809ce90cb5c3d6320f1e673017c6a8fbc79713fadf1f.exe
Files
-
44d829be334d46439bddc6dfab13a937.bin.zip
Password: infected
-
ade74f94d8a756fe9759809ce90cb5c3d6320f1e673017c6a8fbc79713fadf1f.exe.exe windows:4 windows x86 arch:x86
Password: infected
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcpy
Sections
Size: 2.5MB - Virtual size: 6.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 428B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 3.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gzutziek Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ncforays Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE