Static task
static1
Behavioral task
behavioral1
Sample
04a592cc12b9be79a9e440c6e27fb4214360b36bbb363bd64ea4cb8753a88c5b.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
04a592cc12b9be79a9e440c6e27fb4214360b36bbb363bd64ea4cb8753a88c5b.exe
Resource
win10v2004-20240508-en
General
-
Target
18051216763.zip
-
Size
39KB
-
MD5
9a8fc0bbafacce7ee0deb6845ddbbe31
-
SHA1
aa98dd4dcb45325157c0e5acb0c393eb92be774b
-
SHA256
4a9863a0dda50644dc019f3820a15f41e54d11fd92a4722f088e7183e7d343cf
-
SHA512
20c683042ee533448a689b9471b1685f96995262fa2b7bc97aab558b35060dcca9615c60d56879b0c1a50e28282cf27cc5a08ed1f6020c4bc0fe62c12e0dab56
-
SSDEEP
768:ckfN33/SDNkoRcNbt85KFaswQItwqjN7CrTaDZQVObxtMTElKHf735Ip:9fN33/ikoRw/pxqjlC3aD8KmYlONIp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/04a592cc12b9be79a9e440c6e27fb4214360b36bbb363bd64ea4cb8753a88c5b
Files
-
18051216763.zip.zip
Password: infected
-
04a592cc12b9be79a9e440c6e27fb4214360b36bbb363bd64ea4cb8753a88c5b.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ