Static task
static1
Behavioral task
behavioral1
Sample
939310706200640f603a1fb3e6528c3a4bafa87e0d610e817a7824cf2e089bc7.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
939310706200640f603a1fb3e6528c3a4bafa87e0d610e817a7824cf2e089bc7.exe
Resource
win10v2004-20241007-en
General
-
Target
76c2f75bf3efb5964c432f7661d22d58.bin
-
Size
1.7MB
-
MD5
f4927ea72ffbf671389536893b3d4b58
-
SHA1
1b706c38a92dc87f36b643840f9229c96c5d8a3e
-
SHA256
abddce5b04582e68268412241811ff912e8cc512ddf2f4fedbf8a7a3b3ffb958
-
SHA512
7d7126a7a11a3bc726f89cb4b3ff4c568fe56ab493d9d94daad5181857a0ec3c6dfb6325d9020cd8ade39fab4d0e83ec7973a21efd4314e82540fb859038469e
-
SSDEEP
49152:BobC2fexpQep0dc1YqYJEGAt19xAsG87IBW/q:OCjxP0/qYaEsX7IB1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/939310706200640f603a1fb3e6528c3a4bafa87e0d610e817a7824cf2e089bc7.exe
Files
-
76c2f75bf3efb5964c432f7661d22d58.bin.zip
Password: infected
-
939310706200640f603a1fb3e6528c3a4bafa87e0d610e817a7824cf2e089bc7.exe.exe windows:6 windows x86 arch:x86
Password: infected
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
oadzzmvp Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ccijuplx Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE