Static task
static1
Behavioral task
behavioral1
Sample
391aa4087d935147ac83b345555a87c01bdacea2292d29453fd70d8f67048134.exe
Resource
win7-20231215-en
General
-
Target
391aa4087d935147ac83b345555a87c01bdacea2292d29453fd70d8f67048134.zip
-
Size
73KB
-
MD5
dad80caeeedb464e73fd94ab65e11b27
-
SHA1
ba3730fd9fddab20e13fd92365dd60b391268180
-
SHA256
6680244afaea91391607dd7640baf62a27c53f9e1a6b90a33cc2f791952cc73e
-
SHA512
fc6dab257c8e4baafba1625a6f1437e897013ecea2e33c83d104f0efc40dc56e91180a5e528ab4180ac222a398d312ce233e807ba757c1207da25d54e8c1a4d5
-
SSDEEP
1536:MlvYPFkZ4nTw3Zold+1QIfQqSteE+GCnYSFDQCbyXYOqI6Gr9Mpb:MlvYPFkZ4TSKlIlIftexYcDl+XEAxMB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/391aa4087d935147ac83b345555a87c01bdacea2292d29453fd70d8f67048134
Files
-
391aa4087d935147ac83b345555a87c01bdacea2292d29453fd70d8f67048134.zip.zip
Password: threatbook
-
391aa4087d935147ac83b345555a87c01bdacea2292d29453fd70d8f67048134.exe windows:4 windows x86 arch:x86
Password: threatbook
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
pv6T Size: - Virtual size: 204KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Fm1p Size: 74KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tb1�� Size: 4KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE