Static task
static1
Behavioral task
behavioral1
Sample
000b8aabf249b098debf5272810ca2dda8e48f001da966ba8323dc1b3d8d0b39.exe
Resource
win7-20240903-de
Behavioral task
behavioral2
Sample
000b8aabf249b098debf5272810ca2dda8e48f001da966ba8323dc1b3d8d0b39.exe
Resource
win10v2004-20250211-de
General
-
Target
000b8aabf249b098debf5272810ca2dda8e48f001da966ba8323dc1b3d8d0b39.zip
-
Size
4.1MB
-
MD5
916fb7c8e9326ff739d53f3afb29a40b
-
SHA1
7bb6ab6b875bb7515b1aef8b805c9870a47bf9ae
-
SHA256
6e648b78c174cef6945b9fef90fd53a7aaff0b6750e9031f1548869f48d20470
-
SHA512
cc95e16cef3da4f53b93579a190cc0b4e20f037668caa92470c3700ef0fbd165d7badace78f079848690769688d8f1bf1f08e144ecb7257a6b52c2e450d275c6
-
SSDEEP
98304:Qh5gmDUzC207+7J/xkN1NE/1qyU4PU42PCi4j2s2ifRl:8RDUp0S7igDx2PiKoZl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/000b8aabf249b098debf5272810ca2dda8e48f001da966ba8323dc1b3d8d0b39.exe
Files
-
000b8aabf249b098debf5272810ca2dda8e48f001da966ba8323dc1b3d8d0b39.zip.zip
Password: infected
-
000b8aabf249b098debf5272810ca2dda8e48f001da966ba8323dc1b3d8d0b39.exe.exe windows:6 windows x86 arch:x86
Password: infected
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcpy
Sections
Size: 2.4MB - Virtual size: 6.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 3.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kfiyialq Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nusgkzxn Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE