Static task
static1
Behavioral task
behavioral1
Sample
5c1cc642ac90d9a438f2e9e22d5733f4651e242d45935efd680bc9bd1b8ba4f0.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
5c1cc642ac90d9a438f2e9e22d5733f4651e242d45935efd680bc9bd1b8ba4f0.exe
Resource
win10v2004-20231020-en
General
-
Target
5c1cc642ac90d9a438f2e9e22d5733f4651e242d45935efd680bc9bd1b8ba4f0.zip
-
Size
93KB
-
MD5
ecb8f40b43e95b095ca0607a8bbd93b4
-
SHA1
39a3af9b0e3b2ddae96ae478b9a2f27f1aee6e72
-
SHA256
e557ab72b7e9a87d1f6553c2cb7d972f1e961d28679d21329f86188cd6975bac
-
SHA512
3ac8b93d017757c386052e1172251871c8d0d9c4380cca0547e8ee1e34a7503dc038e2e8965809d30a9906fbc9da4acfc51ce33d78bf1c02ec4cf5dc5ab2284b
-
SSDEEP
1536:v/bmaortgOzZm6R+98cVJnmmHA/Mej0VDOypwbdF2uuic7xcHRUKCuGKYvET3xRj:rmaortfzA6IVJ7klUwbdF7uic7xemKY+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/5c1cc642ac90d9a438f2e9e22d5733f4651e242d45935efd680bc9bd1b8ba4f0
Files
-
5c1cc642ac90d9a438f2e9e22d5733f4651e242d45935efd680bc9bd1b8ba4f0.zip.zip
Password: threatbook
-
5c1cc642ac90d9a438f2e9e22d5733f4651e242d45935efd680bc9bd1b8ba4f0.exe windows:1 windows x86
Password: threatbook
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
text Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
�rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 257B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ytui Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ