Static task
static1
Behavioral task
behavioral1
Sample
19421f158c066a50b113683f5e83eee248dd004ac49bad14b8d0e9ee404f356f.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
19421f158c066a50b113683f5e83eee248dd004ac49bad14b8d0e9ee404f356f.exe
Resource
win10v2004-20231020-en
General
-
Target
19421f158c066a50b113683f5e83eee248dd004ac49bad14b8d0e9ee404f356f.exe.zip
-
Size
56KB
-
MD5
e3f430b2637574ed9d9d9251c9cf45c6
-
SHA1
a70f5e8acb16c602819c71bbcaf44be1dc6b0695
-
SHA256
7d37acb8582eeb40a5268ecbbc95d9e5353e4b49324379a53aed47588c94868f
-
SHA512
fccb1cde6b9dd194d4844a632b4013d6c6dcf050a68a5040ba0490e9f4bee7624578ee701cf3ef01e71c0e67048d4a6ea1b1211ef9520cf3a230098ffa322991
-
SSDEEP
1536:jlNQ8tyHEAHVNjLr1xcU57OasggcpLasYKJozdIk:pNr0Hx1NjLHDpgQdoz2k
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/19421f158c066a50b113683f5e83eee248dd004ac49bad14b8d0e9ee404f356f.exe
Files
-
19421f158c066a50b113683f5e83eee248dd004ac49bad14b8d0e9ee404f356f.exe.zip.zip
Password: infected
-
19421f158c066a50b113683f5e83eee248dd004ac49bad14b8d0e9ee404f356f.exe.exe windows:4 windows x86
51e7ef6b1d43d0d05d7109dee9789560
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
imagehlp
CheckSumMappedFile
Sections
.MPRESS1 Size: 53KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 1024B - Virtual size: 861B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE