Static task
static1
Behavioral task
behavioral1
Sample
7761a09c6439f719725b503155717748fa0851cfd5dc9fd9ee610684110b2816.exe
Resource
win7-20241023-en
General
-
Target
10e89712e1f7ae7b5826efe91df81a3c.bin
-
Size
4.2MB
-
MD5
eb10fc16efdbda26435647873e9f31a9
-
SHA1
4a56c2f66815b2ade126ff34db29102d41d178c3
-
SHA256
685c80e25e601806730a92617c822f9c578572ac85917970eee7e7de4516b513
-
SHA512
14b22ae53c1ee7140d340bead7453c4b4f974adb9bbc1fe7fe0801fe7ef515460b57942bb4dd54ebbcafcea57600cd73ef9e2274c9956df946b194a73fd7b409
-
SSDEEP
98304:Q6KKxy82kiq1lBFOR/OpGYtaF48VRmgdohzRFg1uOe+zlE:Q6VxUqnOJP55P4fg1uOeElE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/7761a09c6439f719725b503155717748fa0851cfd5dc9fd9ee610684110b2816.exe
Files
-
10e89712e1f7ae7b5826efe91df81a3c.bin.zip
Password: infected
-
7761a09c6439f719725b503155717748fa0851cfd5dc9fd9ee610684110b2816.exe.exe windows:4 windows x86 arch:x86
Password: infected
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcpy
Sections
Size: 2.5MB - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 428B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fzdjmtzm Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zbhguban Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE