Static task
static1
Behavioral task
behavioral1
Sample
software.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
software.exe
Resource
win10v2004-20230220-en
General
-
Target
f0098d02f5e9835e53806ad663b5a54ea5d922562c9ee1883173ce569da0a44c.zip
-
Size
25KB
-
MD5
662df7031e4ef2e71d8a4c4517e1d898
-
SHA1
e45367a114da336d1f05e22e668c9f566cebde5f
-
SHA256
f0098d02f5e9835e53806ad663b5a54ea5d922562c9ee1883173ce569da0a44c
-
SHA512
bdb9a7fec807e7b875408767b4a383dd7a0a095574cfdc4ca91ae042d95443709313b7e44b21e6675bd5ac0a5611cc091c741c5cab547a8ff8ca7ecef358b40a
-
SSDEEP
384:4mjcKmCvUF12tmwpsr4OhPi28Zytta6aicWPV4X640Ok7CtVy5qG8TKruytol/LM:4mKtTwpsrBhPsEttJhqXh7ZpFBHxPm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/software.exe
Files
-
f0098d02f5e9835e53806ad663b5a54ea5d922562c9ee1883173ce569da0a44c.zip.zip
-
software.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE