Static task
static1
Behavioral task
behavioral1
Sample
61372BCCB86E6E0EEFAA5337ACCDAEA7.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
61372BCCB86E6E0EEFAA5337ACCDAEA7.exe
Resource
win10v2004-20230221-en
General
-
Target
61372BCCB86E6E0EEFAA5337ACCDAEA7.zip
-
Size
181KB
-
MD5
10bc4d880854b20eb4447d8b2d821dd6
-
SHA1
334126b72362a24d2867f021376bb82cfd1780fe
-
SHA256
80ba4c75b5aa907fe481e03c67d80d6bd88d71f3a81b9ae9a6cce03107969872
-
SHA512
6dced14fd727623d2e3453d206780a374c41eb32b0fd4e4dbf48e76d590ca8c74fd35f213377b3821095671db797a5bd76d68fbcc69c83128b2a00bd46ef02ee
-
SSDEEP
3072:rmAKxcg+HRYWpw3a3XgcLqnyqQb/qO2cbElhFHTsaUf3sFNaAfNikAzW1i33rp8/:CDr+Hubq3XlCpQbCO2cbEnFHIZnQsW0c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/61372BCCB86E6E0EEFAA5337ACCDAEA7.bin
Files
-
61372BCCB86E6E0EEFAA5337ACCDAEA7.zip.zip
Password: infected
-
61372BCCB86E6E0EEFAA5337ACCDAEA7.bin.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 182KB - Virtual size: 181KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ