Static task
static1
Behavioral task
behavioral1
Sample
246ec002bb381189fba6814b1e5e18d1773012bca9f4770c54204ee021aaa15b.exe
Resource
win7-20240221-en
General
-
Target
ac03d1474b4e12d5db94ca06fe2bd581fe2dfcd60fd207475592e25e0680e6df
-
Size
64KB
-
MD5
1eec0b0d5ef567475b7079f3f07750ce
-
SHA1
b6bbc8aac0a843e40739da426fd06a0bcefdc197
-
SHA256
ac03d1474b4e12d5db94ca06fe2bd581fe2dfcd60fd207475592e25e0680e6df
-
SHA512
6dc1f710425caa651461c8c347b9c60db97bb84b62e4ddf3030368e9a147320e32fbf595d3cbd61aeffe5c34115997a0c66bf4489c2768990296346968e88c72
-
SSDEEP
1536:zVd7zurunqZLrDIwVVDU8wkE2O1IL5e0k8M3HoseE0Jbh:zVduQQLrDvU8zIILA0k8MXPah
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/246ec002bb381189fba6814b1e5e18d1773012bca9f4770c54204ee021aaa15b
Files
-
ac03d1474b4e12d5db94ca06fe2bd581fe2dfcd60fd207475592e25e0680e6df.zip
Password: infected
-
246ec002bb381189fba6814b1e5e18d1773012bca9f4770c54204ee021aaa15b.exe windows:4 windows x86 arch:x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE