Static task
static1
General
-
Target
17805257464.zip
-
Size
1.3MB
-
MD5
0cb1da0df35386a4d843f96d8bfd066d
-
SHA1
916337b209566a734eeff9cf535824a8c1ab5141
-
SHA256
8d45ffd8ffc402f9c337bc7fdb3e19041d8f1d84ad067db027ef7a293bf7e994
-
SHA512
51f4f4c6323cddf3a7c4dd8cbbb628d016118d870bdbe1cd61174dc2871e069e54d32e96742bcf77eaec8af01592c6112a62b18e9fd5e2f053cca332ea094d06
-
SSDEEP
24576:rFrg9SqiYnGATnihZz8O9/sJl6Bqp+mQ2MW6JWL/LS/LVgl5AZsubvMVpScbSBCU:Rg93GTDz8c/Rq4mEgzLGJgl2ZsqE5SBB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/d9a24f5c62928dd9f5900b4a9d8ce9e09b73509bc75537c223532ebf8c22e76d
Files
-
17805257464.zip.zip
Password: infected
-
d9a24f5c62928dd9f5900b4a9d8ce9e09b73509bc75537c223532ebf8c22e76d.exe windows:5 windows x64 arch:x64
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
"kR Size: - Virtual size: 11.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
b>bbb Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�b b�* Size: 78KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE