Static task
static1
General
-
Target
Insomnia (2222).zip
-
Size
115.6MB
-
MD5
7c94d7d52ac279bf8ef8a19575c76b94
-
SHA1
5d7b8f497842b53e8932f26156a5d2180e594294
-
SHA256
0cb7c6c08aad0accd2b8f565c687fe3f8b4743cfe20a3154a69c397d3992cb84
-
SHA512
3c2e7c0c24c4427f7bc8b67622679c89848d0f98bb2dda37e375c920a9c3d12b1d2df494744fa2097239a996dcf67bf8b193f382dcfb9cda65ef0409248ca335
-
SSDEEP
3145728:diJGXiiPkr93oxjaD/LyP86P4HOiFfnYTcawx6D+2:djiOs4do/LyPTPwxYnS6DR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Insomnia.exe
Files
-
Insomnia (2222).zip.zip
Password: 2222
-
Insomnia.exe.exe windows:6 windows x86 arch:x86
Password: 2222
828e3bb33c20f95067a6b11445fca483
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateProcessW
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress
shell32
SHEmptyRecycleBinW
user32
CloseClipboard
gdi32
BitBlt
ole32
CoCreateInstance
oleaut32
SysAllocString
Sections
.text Size: - Virtual size: 255KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp╠� Size: - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp╠� Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp╠� Size: 4.8MB - Virtual size: 4.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 307KB - Virtual size: 306KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ