Static task
static1
Behavioral task
behavioral1
Sample
b30e98728deda4ef70e8b2e041a1a050a59e075b57ba668cb7958159a5cb7877.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
b30e98728deda4ef70e8b2e041a1a050a59e075b57ba668cb7958159a5cb7877.exe
Resource
win10v2004-20230915-en
General
-
Target
b30e98728deda4ef70e8b2e041a1a050a59e075b57ba668cb7958159a5cb7877.exe.zip
-
Size
393KB
-
MD5
9fec3cdaec2b8898f92aefb2ef854c2d
-
SHA1
e7455e83f5f7374d76585468e94c2c329994d749
-
SHA256
2e7d32a7c2a6f791d0aab1edb18aef17224b3b37b5a9c00dd7d992cd0f82da64
-
SHA512
97f2b1f11c9f247eb6a96686176bb217f9dc5a3ef776b9096b90a31d073bfe839f43e119050800af257c3c7e499854897954d3de0519c7cd3156a9c01213ff23
-
SSDEEP
12288:aMEaYbeqlvv6VuAdPiHw2VI7BrRo9+dxFdQG:aM4be1Fv5hRwsFdt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/b30e98728deda4ef70e8b2e041a1a050a59e075b57ba668cb7958159a5cb7877.exe
Files
-
b30e98728deda4ef70e8b2e041a1a050a59e075b57ba668cb7958159a5cb7877.exe.zip.zip
Password: infected
-
b30e98728deda4ef70e8b2e041a1a050a59e075b57ba668cb7958159a5cb7877.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 241KB - Virtual size: 600KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 144KB - Virtual size: 424KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE