Static task
static1
Behavioral task
behavioral1
Sample
fb973b744b6fda7b7316ebfdd50c6fd8a9976047695347143c15525b37834b46.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
fb973b744b6fda7b7316ebfdd50c6fd8a9976047695347143c15525b37834b46.exe
Resource
win10v2004-20231020-en
General
-
Target
fb973b744b6fda7b7316ebfdd50c6fd8a9976047695347143c15525b37834b46.zip
-
Size
168KB
-
MD5
b3e9cef351c0ce4db6444ed7e38d6109
-
SHA1
5eef1710b51885463406802716542af889e88e6d
-
SHA256
3520dd93f9a72854903243130049550dc036231f0b6d37ef61244a9e1388d1e6
-
SHA512
35ec99355db3c753cbe058139a4cf93a250dd90c20405b81e860fa5b454526c095ca66da36c3e48b3b7a2f2cda0ae908fa34c3b6eef8f5c3e2c5ccb4c57fb1cb
-
SSDEEP
3072:u/id9XjACg8INg5RMmhKR68n6iRnh+Zm1U7E3FP+CPrI5iVaTmKn1xFfi1:gidlApeLMm4wAhf+Zm/+eI/1m1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/fb973b744b6fda7b7316ebfdd50c6fd8a9976047695347143c15525b37834b46.exe
Files
-
fb973b744b6fda7b7316ebfdd50c6fd8a9976047695347143c15525b37834b46.zip.zip
Password: infected
-
fb973b744b6fda7b7316ebfdd50c6fd8a9976047695347143c15525b37834b46.exe.exe windows:5 windows x86 arch:x86
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.nyert Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 347KB - Virtual size: 349KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qnnuy Size: 1KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE