Static task
static1
Behavioral task
behavioral1
Sample
276721869ae8b8e7fc81f1e0de5fb924aedf32b8db0ddd548dd89f3704649373.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
276721869ae8b8e7fc81f1e0de5fb924aedf32b8db0ddd548dd89f3704649373.exe
Resource
win10v2004-20230915-en
General
-
Target
276721869ae8b8e7fc81f1e0de5fb924aedf32b8db0ddd548dd89f3704649373.zip
-
Size
125KB
-
MD5
7f5e8f76607a93e1af3655a5f92a77a0
-
SHA1
f8fed811895c797f00a7f71a62e311dea3723fed
-
SHA256
69396c2268fbae7bfacef78c84f948388b3c664af96b4f901d4d4260748da056
-
SHA512
98428b07cc0d42f9acf1d39f203932dcdc3b7008eeb6c67a0a47a3723cc2a74a9638bdc145da579ee04ab9d1fcc64329092e27caaa656c518a1ed3023273c923
-
SSDEEP
3072:j1DBaiZ/gATv2Ox2wrDwKhCrCTgZ4d/IEIvj1JxkRfbPBcsaop86HfnXOL:vZZ/gmJxXfkrKyEIb1nkRfbPGv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/276721869ae8b8e7fc81f1e0de5fb924aedf32b8db0ddd548dd89f3704649373
Files
-
276721869ae8b8e7fc81f1e0de5fb924aedf32b8db0ddd548dd89f3704649373.zip.zip
Password: infected
-
276721869ae8b8e7fc81f1e0de5fb924aedf32b8db0ddd548dd89f3704649373.exe windows:4 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 310KB - Virtual size: 310KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ