Static task
static1
Behavioral task
behavioral1
Sample
c70be7ec4701c565262f9b46fec2ecbfcb0a7d19ed1913ce6e8de9af1c645371.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
c70be7ec4701c565262f9b46fec2ecbfcb0a7d19ed1913ce6e8de9af1c645371.exe
Resource
win10v2004-20230915-en
General
-
Target
c70be7ec4701c565262f9b46fec2ecbfcb0a7d19ed1913ce6e8de9af1c645371.exe.zip
-
Size
233KB
-
MD5
b9a2c58c2c07c7874a84a311fc051f6d
-
SHA1
27e9cf326b3cc4a5a72fec7a64c6d93c03b5d34b
-
SHA256
3faa6b96788e013395db022b036ba493c5225cb2ec28f4c3ca95c91b532a6e7f
-
SHA512
d7809883c4c5a727c8d3a83c1e0655aa5ee2fa1ad5ae40e87c0a0ccfa413e978cebe5a9e6eeae8a2b521a814e302aa83f342010bc5bfd19013cdc6b39af185fc
-
SSDEEP
6144:zOBthgqepEqzhpS2bWKJiTw4yJbbeINoHqqXzuFNy5Y7:zegqepEtoWKMc4yp1NolXzuFD7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/c70be7ec4701c565262f9b46fec2ecbfcb0a7d19ed1913ce6e8de9af1c645371.exe
Files
-
c70be7ec4701c565262f9b46fec2ecbfcb0a7d19ed1913ce6e8de9af1c645371.exe.zip.zip
Password: infected
-
c70be7ec4701c565262f9b46fec2ecbfcb0a7d19ed1913ce6e8de9af1c645371.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 184KB - Virtual size: 500KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 18KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE