Static task
static1
Behavioral task
behavioral1
Sample
8a7cc5239d412feb2e6977e47b1f3ca475fb70172ac200b81ed7700a4097564f.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
8a7cc5239d412feb2e6977e47b1f3ca475fb70172ac200b81ed7700a4097564f.exe
Resource
win10v2004-20231020-en
General
-
Target
8a7cc5239d412feb2e6977e47b1f3ca475fb70172ac200b81ed7700a4097564f.zip
-
Size
132KB
-
MD5
c80533bdd77f8acc37f22a30faa6b9ca
-
SHA1
159d083b61c5f3f91097aa0cb696fb07c37058d0
-
SHA256
2ac5348aa7a330900221370392bf472e68dd91a5c3b2413146d8bad296ad2896
-
SHA512
50836f77ae55ac31c73f25b7e0a5173e50fa91534ee553a23d6f9ea30679ca4c157b2616ea748233538b60b3c4ed9dfe51e778d4ce9c04987b3f03ad7db36761
-
SSDEEP
3072:Ej3nuIE8M6l+D0RZvsBW2JIQV2lpw5bqPpsF:Ej3nuTloZvSW2JqaypsF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/8a7cc5239d412feb2e6977e47b1f3ca475fb70172ac200b81ed7700a4097564f.exe
Files
-
8a7cc5239d412feb2e6977e47b1f3ca475fb70172ac200b81ed7700a4097564f.zip.zip
Password: infected
-
8a7cc5239d412feb2e6977e47b1f3ca475fb70172ac200b81ed7700a4097564f.exe.exe windows:5 windows x86 arch:x86
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 65KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 224KB - Virtual size: 226KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 1KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE