Static task
static1
Behavioral task
behavioral1
Sample
c4129b796638135f24c7c051eea530a599318d0b664341bf6bbab37c177375ac.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
c4129b796638135f24c7c051eea530a599318d0b664341bf6bbab37c177375ac.exe
Resource
win10v2004-20230915-en
General
-
Target
c4129b796638135f24c7c051eea530a599318d0b664341bf6bbab37c177375ac.exe.zip
-
Size
4.4MB
-
MD5
69b1438bf826cf7980be6500f8d6ef1a
-
SHA1
a55d5e95335bfeb83420f0b361fef3119f449ac0
-
SHA256
0de72d0fcb0028f274812d6a096249f7ff54591aab4d4b8a2dbb2a68a225ed38
-
SHA512
aa0a1326c4006acac3dc718f34f2f87aa1eb4ad7dd32d6d47cb453bd0b21a2a16fabedc54e69c30c376970ad7a9cb21bff7562a7aa144eb8c9ec73eb51dc13a4
-
SSDEEP
98304:A4UhaONUuRdhLo11GwZUP0ldbmInFT+N7ze1FLdCyqHPSvjksqD5wVa8:+OuHhww4dbmkFy3QuJv2jDUM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/c4129b796638135f24c7c051eea530a599318d0b664341bf6bbab37c177375ac.exe
Files
-
c4129b796638135f24c7c051eea530a599318d0b664341bf6bbab37c177375ac.exe.zip.zip
Password: infected
-
c4129b796638135f24c7c051eea530a599318d0b664341bf6bbab37c177375ac.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.enigma1 Size: 8.5MB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.enigma2 Size: 264KB - Virtual size: 264KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE