Static task
static1
Behavioral task
behavioral1
Sample
3be9c222d2c1cdc19b164f542b26b1c45e29f88fcd77d052659c77029988ad6d.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3be9c222d2c1cdc19b164f542b26b1c45e29f88fcd77d052659c77029988ad6d.exe
Resource
win10v2004-20240412-en
General
-
Target
2e1069783fc3d3805170e4920806c26aea6a4a81144392d097040b66cc10425c
-
Size
13KB
-
MD5
637aef7e1ef78992297d98719e7356ea
-
SHA1
541385cd953ce782594db737dd2e6b0926efc18e
-
SHA256
2e1069783fc3d3805170e4920806c26aea6a4a81144392d097040b66cc10425c
-
SHA512
049b54d4db227600437a268123570b6b4415bf6e7bda479db5f05d52647a629fbc3c9c7d2de9086753ea9990ab80e4927ab41521598e8703bd8f199dde440220
-
SSDEEP
384:nM2Kg9TMpc1xH+l2nef6rlkT1WVeOHglwo78XM:nzKXpczK22alCWVeZ1cM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/3be9c222d2c1cdc19b164f542b26b1c45e29f88fcd77d052659c77029988ad6d
Files
-
2e1069783fc3d3805170e4920806c26aea6a4a81144392d097040b66cc10425c.zip
Password: infected
-
3be9c222d2c1cdc19b164f542b26b1c45e29f88fcd77d052659c77029988ad6d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE