Static task
static1
Behavioral task
behavioral1
Sample
efbfd7a968dc584c166551f171937da09dd94178b8c27e09f5eab73d1641d0d0.exe
Resource
win7-20240903-en
General
-
Target
7dc7a8d2e9d44cae10b9b55b65585ddc.bin
-
Size
1.7MB
-
MD5
d78a817814c72b41e0df5298db0274f7
-
SHA1
b8a000c31c6560e52fce7d8873aa13ecdbff906b
-
SHA256
446999d49a6900e5753695ac8582e9eaef812acee88fd908d857073e8e200b8d
-
SHA512
e4b668cd3fc23141b245db8acdcfdae8467cdcc1fac1c37abec27095250c50ec9efc1a9367873155e1adce766787e733658b9341f0ca4477d0364307b67a2d6c
-
SSDEEP
49152:7kQIMpxes2RO0VdyFDliQOZQ9769i5RLtFu:QNMpxerObJ96QRRLXu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/efbfd7a968dc584c166551f171937da09dd94178b8c27e09f5eab73d1641d0d0.exe
Files
-
7dc7a8d2e9d44cae10b9b55b65585ddc.bin.zip
Password: infected
-
efbfd7a968dc584c166551f171937da09dd94178b8c27e09f5eab73d1641d0d0.exe.exe windows:6 windows x86 arch:x86
Password: infected
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 416KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cqjlvrjj Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fvbffgym Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE