Static task
static1
Behavioral task
behavioral1
Sample
b8dd4a784dda6eba1e23db2b1a8efe64c213136ea8d92680324af4bb2035416e.zip
Resource
win10v2004-20231127-en
Behavioral task
behavioral2
Sample
b8dd4a784dda6eba1e23db2b1a8efe64c213136ea8d92680324af4bb2035416e.exe
Resource
win10v2004-20231130-en
General
-
Target
b8dd4a784dda6eba1e23db2b1a8efe64c213136ea8d92680324af4bb2035416e.zip
-
Size
1.2MB
-
MD5
067020e53b4aade221123617f70a0b08
-
SHA1
930d6290e35c996d22330aa4f5d6cb5a30b0d088
-
SHA256
a5167983260e1f9ba0268a45f77a918321d6034dc3a787eadaa12140e1724868
-
SHA512
d1b0693cb61bf42752d6bc7cca178da0c55ee719761f302405815af782c611a019179163db5ccbdff972f21e256ed3382e50bc48e8bccab9e6f82cd0c4131ca0
-
SSDEEP
24576:51KxTtEp7ziEyK4Sj/uAhCJjLuW+oixEaVjQYBlHgb1TfY+D+er4:51atO+K4SjuAhxW+oixEaVMhXKeU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/b8dd4a784dda6eba1e23db2b1a8efe64c213136ea8d92680324af4bb2035416e.exe
Files
-
b8dd4a784dda6eba1e23db2b1a8efe64c213136ea8d92680324af4bb2035416e.zip.zip
Password: infected
-
b8dd4a784dda6eba1e23db2b1a8efe64c213136ea8d92680324af4bb2035416e.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 19KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 20KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 66KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 186KB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 951KB - Virtual size: 952KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE