Static task
static1
Behavioral task
behavioral1
Sample
24fd571600dcc00bf2bb8577c7e4fd67275f7d19d852b909395bebcbb1274e04.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
24fd571600dcc00bf2bb8577c7e4fd67275f7d19d852b909395bebcbb1274e04.exe
Resource
win10v2004-20231215-en
General
-
Target
13960964551.zip
-
Size
9KB
-
MD5
abbfa6844e6fe8430b723a98fedabddd
-
SHA1
ece9d738b5ba15adb8dfebdee47a704a354cb2b4
-
SHA256
0f8ab0aab392d99fbe4ea18c107b113619ca8559ff2409d28f3af617daf1abab
-
SHA512
adba811d10e451cb7fe053c56508efde9e5180175da38d4657d52e287dd5ee1efca1d07fe1cf0bb70a5eefa518f8bd7dd706370b29d25f30e2f3d6c670ba3b7e
-
SSDEEP
192:mudEUmZiBtwe+WP6IVGJUlE6V2pFxb3GYhi9RggV7FT0OU1YoZr8O/E:rDEiBtL+kBsOUNb3GkKtFT0zYoZrQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/24fd571600dcc00bf2bb8577c7e4fd67275f7d19d852b909395bebcbb1274e04
Files
-
13960964551.zip.zip
Password: infected
-
24fd571600dcc00bf2bb8577c7e4fd67275f7d19d852b909395bebcbb1274e04.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ