Static task
static1
Behavioral task
behavioral1
Sample
transfer_ro-20nov-337092cb7c/1.2.6.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
transfer_ro-20nov-337092cb7c/1.2.6.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
transfer_ro-20nov-337092cb7c/readme.htm
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
transfer_ro-20nov-337092cb7c/readme.htm
Resource
win10v2004-20240226-en
General
-
Target
b710d096195adec55b257e9bff0ddbc3
-
Size
33KB
-
MD5
b710d096195adec55b257e9bff0ddbc3
-
SHA1
9ec11ff29f5f485bd6598916997b8682786fa58c
-
SHA256
56d06d472d8992c8331296d9035b53c4f43afcfe208ff4e111950014ef1fdbe0
-
SHA512
e078627bdd2421a98a7c6cde9b90ba813734b2d52f060b725a8aa88a1bbb30d2143579542db0f5ecd15faf1b9112161ca1bbd734692be38693934b37373b38ea
-
SSDEEP
768:Z4Uch7TzTBziM5TeiZsVWijwEkn85L7pTL/9f6f4:ZhcZ3rEk8BpTL91
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/transfer_ro-20nov-337092cb7c/1.2.6.exe
Files
-
b710d096195adec55b257e9bff0ddbc3.zip
-
transfer_ro-20nov-337092cb7c/1.2.6.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
transfer_ro-20nov-337092cb7c/readme.htm.html