Static task
static1
Behavioral task
behavioral1
Sample
ПОКУПКА ТОВАРОВ.exe
Resource
win7-20240705-en
General
-
Target
ПОКУПКА ТОВАРОВ.zip
-
Size
622KB
-
MD5
e176653e327f0b039d5be515f9f313e5
-
SHA1
d429eaddb3cfd45c00f0a2274797cc21abb0e2b7
-
SHA256
f257baeb95e78fa83112b2991739a120bb8033896d831d7f7ffd2ce6d104580b
-
SHA512
48adbf940f5a6086d27d205739487d403ecdb3373c557ed6b52ff2d59ef29d729d1fd023ab06147a221f29da67db2999b78b49fb8059a862edb317e5264c0d55
-
SSDEEP
12288:5tzSeK1RExFEzW56vDyJFr0Py/LaH7V6TxqXsfK84DafxPnn:nzSX1R5SEDyv0Py/LaBAHy84epv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ПОКУПКА ТОВАРОВ.exe
Files
-
ПОКУПКА ТОВАРОВ.zip.zip
-
ПОКУПКА ТОВАРОВ.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ