Static task
static1
Behavioral task
behavioral1
Sample
68ff0ded6088bdc46d3c8891a9b11bf9257f0513701fc63d3c9a23ea72c3e65d.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
68ff0ded6088bdc46d3c8891a9b11bf9257f0513701fc63d3c9a23ea72c3e65d.exe
Resource
win10v2004-20231023-en
General
-
Target
68ff0ded6088bdc46d3c8891a9b11bf9257f0513701fc63d3c9a23ea72c3e65d.zip
-
Size
93KB
-
MD5
4ffdba587e884ff5ed26748ac477bcc5
-
SHA1
de5b253780110594c161b99853f03b909aebf97c
-
SHA256
da9287e450b0d3dd32af9153fcb18a079b2c188bd6ea08002b45cf410ea878b6
-
SHA512
4e4334b715dbaeecbf0786731114438e484d28996e5e48b03adf3f33dd7184691e7e4259f71f87604dcef8abe80f7b380bd068a53c496e0c6e7cebb16e2abbad
-
SSDEEP
1536:E0+ge7u12BYpZOYTUki8r0yKjmL54rkZ73+8VNoIgyzlmacSktF9ozdRMUS:EXge22BYTi8rVM7rAyG90SktDIRzS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/68ff0ded6088bdc46d3c8891a9b11bf9257f0513701fc63d3c9a23ea72c3e65d
Files
-
68ff0ded6088bdc46d3c8891a9b11bf9257f0513701fc63d3c9a23ea72c3e65d.zip.zip
Password: threatbook
-
68ff0ded6088bdc46d3c8891a9b11bf9257f0513701fc63d3c9a23ea72c3e65d.exe windows:1 windows x86
Password: threatbook
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
text Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
�rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sytui Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ