Static task
static1
Behavioral task
behavioral1
Sample
c62f2e8a741c0b7d13ac165ab64d572f291102249eef3645b9640f84ea73cd4d.zip
Resource
win10v2004-20240611-en
Behavioral task
behavioral2
Sample
c62f2e8a741c0b7d13ac165ab64d572f291102249eef3645b9640f84ea73cd4d.exe
Resource
win10v2004-20240508-en
General
-
Target
c62f2e8a741c0b7d13ac165ab64d572f291102249eef3645b9640f84ea73cd4d.zip
-
Size
642KB
-
MD5
bf5b077d7e4842516025f1e07b5e95dc
-
SHA1
dd84584b8709ba459feca726d262160a217747cf
-
SHA256
e0955ca6445e20f85a575ffd03883d425f6be516d3a124b375d1fb6285696754
-
SHA512
8161c06f8c3e44b3d350bff595c46575b87839f7232dd0407681fb541f2e1ba0bd3ac4582f36290e69e999b822e779532456bf5b9ac3d586921d3816aaa7227f
-
SSDEEP
12288:N9OehvDKg2F52Ud0meIzHXN+fnaDf5Q8Uw7OxSRO4Cm4TsSpgxV9SZDc5nOlOoFE:Nwehv452UXeIjXNC668t+PpSV9YA5oOF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/c62f2e8a741c0b7d13ac165ab64d572f291102249eef3645b9640f84ea73cd4d.exe
Files
-
c62f2e8a741c0b7d13ac165ab64d572f291102249eef3645b9640f84ea73cd4d.zip.zip
Password: infected
-
c62f2e8a741c0b7d13ac165ab64d572f291102249eef3645b9640f84ea73cd4d.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 669KB - Virtual size: 669KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ