Static task
static1
Behavioral task
behavioral1
Sample
ac25ec214ea16e69ff312fab81760506ccd6638f43d35ba039342ba84e08293e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ac25ec214ea16e69ff312fab81760506ccd6638f43d35ba039342ba84e08293e.exe
Resource
win10v2004-20240419-en
General
-
Target
16874663103.zip
-
Size
61KB
-
MD5
a1724377a3a6d0d54a7ea29466e6397b
-
SHA1
bd20eefbccec95b34ed4486b09736904c2274d3e
-
SHA256
a7c2fd50a9ef16a1dbea84f25cc1ed59ab1ebc3a6503e76b8a3482756400e927
-
SHA512
bfd6a4d2ac61b223839793251bdd9e21d60bc1f8dc8f4c1f62a7508ae4737641244234d332b044be2bad2eec30b57021ca8139ddd2f4285fc971a7d0d3948128
-
SSDEEP
1536:/cCYG/2zXRPVxK1QmzcXXWTqTVf0TUN/FX3F:/cCYG/2D6EXXWUVcTU1FX3F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ac25ec214ea16e69ff312fab81760506ccd6638f43d35ba039342ba84e08293e
Files
-
16874663103.zip.zip
Password: infected
-
ac25ec214ea16e69ff312fab81760506ccd6638f43d35ba039342ba84e08293e.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 264KB - Virtual size: 264KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE