Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.W32.Zbot.I.gen.Eldorado.20541.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.W32.Zbot.I.gen.Eldorado.20541.exe
Resource
win10v2004-20230703-en
General
-
Target
SecuriteInfo.com.W32.Zbot.I.gen.Eldorado.20541.6028
-
Size
64KB
-
MD5
5f3d8632cb6e3239ee3c5aad57dfafff
-
SHA1
90fc2f7d31a20bfa05ab88affc4398fa04ecabce
-
SHA256
ce81c3624a359d2ab6b028a7669812f969f01dedfa4a84652d3b985637a15693
-
SHA512
5e257705d39d1aea7677a6be686b454e0729ac299539f595a4e0dcb3ef0093a43df9483b0307542af8a1904bfcf6208f07ed448c2f5c47ed388723170fe48eae
-
SSDEEP
384:7f7n/dxOnBXPDVsjmB+M0aOIVDwHQRrNRZqrVMUSNNZ8KiwJ6l/xxnuQdRj/xal/:7j/d8BbVsjmLl0HGRKVyqKiw2xxnu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.W32.Zbot.I.gen.Eldorado.20541.6028
Files
-
SecuriteInfo.com.W32.Zbot.I.gen.Eldorado.20541.6028.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.code Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE