Static task
static1
Behavioral task
behavioral1
Sample
C/ProgramData/Sentinel/AFUCache/cb907f2a284a33313d3fce6b8bd47d079f75a730574aba92e9d7f6c9b860d326.exe
Resource
win7-20230220-en
General
-
Target
cb907f2a284a33313d3fce6b8bd47d079f75a730574aba92e9d7f6c9b860d326.zip
-
Size
88KB
-
MD5
4fbaaca16fe6a920f595c811468cf235
-
SHA1
4fa1e29c712eb0d9eb10d0ca462399f78dc81ff9
-
SHA256
a8c2760cc630ecddd4277c60b46f347c13cbb6724d2ea5bf1c8d06fbb0e0a95e
-
SHA512
87afffbce61add88d9f290b99c773f12d745432f7d1f45e84f256657769c281c9423b943a627cfbee24d07d9410625839fba4a2369a2d07bcb318641f784f9e9
-
SSDEEP
1536:NEC1CbZd22H81yXUv9DoSwVuT1vCJs2aiCCmfd012gE6h3QtSptyJSt2latKpKQ/:Z1CbyG8AM2SxFCJqsCo153QtSpti8tb0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/C/ProgramData/Sentinel/AFUCache/cb907f2a284a33313d3fce6b8bd47d079f75a730574aba92e9d7f6c9b860d326
Files
-
cb907f2a284a33313d3fce6b8bd47d079f75a730574aba92e9d7f6c9b860d326.zip.zip
Password: S1BinaryVault
-
C/ProgramData/Sentinel/AFUCache/cb907f2a284a33313d3fce6b8bd47d079f75a730574aba92e9d7f6c9b860d326.exe windows x86
Password: S1BinaryVault
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 72KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
manifest.json