Static task
static1
General
-
Target
Patch Fix.zip
-
Size
36.3MB
-
MD5
fb81ee8bdc2cb8f8d8c5f82a84e49d86
-
SHA1
924effd81700bac7888a4c368ebcf53e0d5a57ec
-
SHA256
32564beccf3e184dd40875c0b35c4f47059b888af64ca0a4dbbbfbab76832bb9
-
SHA512
701870b85ff498d8f6a3c064b7e5330aadf031b6842381160db49e30c34de39333d7102a95db9fb3089a38c89b4ade5fad0fc6563486bc3824a547ed65bdd3f0
-
SSDEEP
786432:eIalhCCHtQ4Tyn4Nu498PqDudk7pbBoog6HlCzSBCRS6yT9ip:eI2hxtDWncu4ae47og6FSoE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/wfilmorav133127152-zmco.exe
Files
-
Patch Fix.zip.zip
Password: cgpersia-zmco
-
wfilmorav133127152-zmco.exe.exe windows:4 windows x86 arch:x86
Password: cgpersia-zmco
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 13KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36.0MB - Virtual size: 38.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 312KB - Virtual size: 312KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE