Static task
static1
Behavioral task
behavioral1
Sample
ZdVkArFtVOs.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
ZdVkArFtVOs.exe
Resource
win10v2004-20240611-en
General
-
Target
ZdVkArFtVOs.zip
-
Size
1.4MB
-
MD5
773becbea626f56bca18bc3e74dbb35b
-
SHA1
8519d1b247cb741931401643b82a104d929d6a58
-
SHA256
13df631a797ab9dffaa85311c538151803ddbaeb011dcdd84ef0a9d4debcf29a
-
SHA512
fb8d754b09c6de0c2bfd0de0a72c2d25a0c6d63f6bf84e8340fd3f0e83bfc840f0b4058151a5b8d21436ccc5f21bfc0c4b32da512106e8998e8cbc9b7d245f04
-
SSDEEP
24576:koLU0kBPhaOk182jV+EAdIzeeDHMmqk1kO9x7EuE1gC1S6W/A2FFKX7C61:FLp1825AdFeDHMlk1dtsgZFFKLr1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ZdVkArFtVOs.exe
Files
-
ZdVkArFtVOs.zip.zip
-
ZdVkArFtVOs.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 280KB - Virtual size: 588KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 76KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 176KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 872KB - Virtual size: 872KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE