Static task
static1
Behavioral task
behavioral1
Sample
9b3593a5c6e166826761088ef67e16c8900c83125ceca4e5bb46813b075ff987.exe
Resource
win7-20230824-es
Behavioral task
behavioral2
Sample
9b3593a5c6e166826761088ef67e16c8900c83125ceca4e5bb46813b075ff987.exe
Resource
win10v2004-20230703-es
General
-
Target
11669486510.zip
-
Size
715KB
-
MD5
ae19e146372dcafb3192cc699a9f8e93
-
SHA1
154052b6798ce1a2f6ddd0c857adc8e9d27c98b7
-
SHA256
7003e8834c0bfbdcc8db156038d1e536a37cc8e9fcc291b745c813b37f35d823
-
SHA512
6815521e1c41f02eafb1d27de0f82700d69b0241b79c8ea78f7d5f13d5fc0e4bc14e30d4bf681d213630390a3f78e31daec29895590274ee71f4ea7c07ed35a9
-
SSDEEP
12288:7s7IJDsjXoDV834FICBsU1eYz+g/yjT9PNt4byeT3Qsu3pjNqIYO:7sycmV8hCGU00+g/ENt4bdr0pw3O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/9b3593a5c6e166826761088ef67e16c8900c83125ceca4e5bb46813b075ff987
Files
-
11669486510.zip.zip
Password: infected
-
9b3593a5c6e166826761088ef67e16c8900c83125ceca4e5bb46813b075ff987.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 6KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 384KB - Virtual size: 560KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 327KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE