Static task
static1
Behavioral task
behavioral1
Sample
d0b08cfb1e951c3eb40eb4c49c4a6400c7de8e6d17079e5c61385d3e8fd70937.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
d0b08cfb1e951c3eb40eb4c49c4a6400c7de8e6d17079e5c61385d3e8fd70937.exe
Resource
win10v2004-20231215-en
General
-
Target
d0b08cfb1e951c3eb40eb4c49c4a6400c7de8e6d17079e5c61385d3e8fd70937.exe.zip
-
Size
15.1MB
-
MD5
2ffdb3fb8fab0f3b5a161c22216a4924
-
SHA1
c9facb7f9b68ce5fdbb208acc20192d678b458d4
-
SHA256
957030c8e376f03d933c0ef1350d61b8b57fd9d622a099673a7da346861c6aea
-
SHA512
059c7e597e235b160e29e165a3031511175772d02ddd4569caa518f18bbc29a1a3f22c252156b261d82d518676c704118f325b70afea446b6716db2a1633b434
-
SSDEEP
393216:r+sEFItMiE/nZV4SfByTThz7Exu7uMkOBVCsVKtqbcEAM1:r+XSMb/nZaSqRAxut/BYtq6M1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/d0b08cfb1e951c3eb40eb4c49c4a6400c7de8e6d17079e5c61385d3e8fd70937.exe
Files
-
d0b08cfb1e951c3eb40eb4c49c4a6400c7de8e6d17079e5c61385d3e8fd70937.exe.zip.zip
Password: infected
-
d0b08cfb1e951c3eb40eb4c49c4a6400c7de8e6d17079e5c61385d3e8fd70937.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 210KB - Virtual size: 524KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 750KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 295KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE