Static task
static1
Behavioral task
behavioral1
Sample
824a76c39895bc3ad4f5dfc27fc3ac80d26514118c4669505a1f0cfdc8fdbcdc.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
824a76c39895bc3ad4f5dfc27fc3ac80d26514118c4669505a1f0cfdc8fdbcdc.exe
Resource
win10-20240221-en
Behavioral task
behavioral3
Sample
824a76c39895bc3ad4f5dfc27fc3ac80d26514118c4669505a1f0cfdc8fdbcdc.exe
Resource
win11-20240221-en
General
-
Target
824a76c39895bc3ad4f5dfc27fc3ac80d26514118c4669505a1f0cfdc8fdbcdc.zip
-
Size
172KB
-
MD5
3a76014de472ba5c4afc4af54d121242
-
SHA1
72620d8068e0c1f456d1b02c66f7dd5a45047d38
-
SHA256
b70ec8c6a31fd85c8161f4b94b95aa57ae59647e4559ae47b823ddcb906f7bbe
-
SHA512
7bd0f0f65609e4f8b9121f841cc23a85b1490cb72ed97d907f33b12c9bd8d24d508e33ab6fe3eba54060562f9777ab100a96be8534a39fa150bbf5c3a773f2db
-
SSDEEP
3072:GI2IW5PurljM6L6JgveEhwiMPbAJogr/wtG1uxjulrxZnJRZaYVEOs:S/5PoS6WJghHMjmVr4wzxZay1s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack001/824a76c39895bc3ad4f5dfc27fc3ac80d26514118c4669505a1f0cfdc8fdbcdc.exe
Files
-
824a76c39895bc3ad4f5dfc27fc3ac80d26514118c4669505a1f0cfdc8fdbcdc.zip.zip
Password: infected
-
824a76c39895bc3ad4f5dfc27fc3ac80d26514118c4669505a1f0cfdc8fdbcdc.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.code Size: 331KB - Virtual size: 332KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdatau Size: 11KB - Virtual size: 956KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE