Static task
static1
Behavioral task
behavioral1
Sample
Zoom.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Zoom.exe
Resource
win10v2004-20240226-en
General
-
Target
Zoom.exe
-
Size
135KB
-
MD5
8850a64bca697c7847bbe145df779e41
-
SHA1
160cab1fe51716661a5b054005ea75404cf58402
-
SHA256
960483ec6a2967400e346bf692c4c76b247cecca812f6f1230e40bc0ed02a530
-
SHA512
75c456771253403c04bcc157045603463b41140b0f0df70df1778b8ebfd2e34aa0b1a26409af3d5570b0dba8ec2d412f9139694c49a88cd74476f857469da3eb
-
SSDEEP
1536:sTnHDn4L/NRVidd1HOg/1Qo27ezcHkRB+hKb:kn0rcp6vKpRB3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Zoom.exe
Files
-
Zoom.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 129KB - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ