Static task
static1
Behavioral task
behavioral1
Sample
dedbf46c98bb1f50df4c1b1f484359f23eec600f5cd701cb72fd8df8de3562b9.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
dedbf46c98bb1f50df4c1b1f484359f23eec600f5cd701cb72fd8df8de3562b9.exe
Resource
win10v2004-20240802-en
General
-
Target
dedbf46c98bb1f50df4c1b1f484359f23eec600f5cd701cb72fd8df8de3562b9.zip
-
Size
11KB
-
MD5
e190ebab1a53cfbadc3e7531fd463d82
-
SHA1
817f9abe099657d7bc56f112c1ebbe947eb786c7
-
SHA256
e44f8deb243799eceff64665bd77baac63d0c78a8a002ec10f37b6bdeb9ef4cd
-
SHA512
e42ed08c01c431cb60585b283a41dfa16ddde7231b26f421dd064a25645c09c152db2be35df7cada8f37f6c669f0cae26febf4821f353a6c87219c6c4ebb06d4
-
SSDEEP
192:uxkK0fijvHllCG5GeMKALvatsb96XAcWNNyzVFonjpdMli68teO7cRAeWYY9KsND:YH00ykGeMKeb96QVDy+CQ68teO7j5YZc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/dedbf46c98bb1f50df4c1b1f484359f23eec600f5cd701cb72fd8df8de3562b9.exe
Files
-
dedbf46c98bb1f50df4c1b1f484359f23eec600f5cd701cb72fd8df8de3562b9.zip.zip
Password: infected
-
dedbf46c98bb1f50df4c1b1f484359f23eec600f5cd701cb72fd8df8de3562b9.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 166KB - Virtual size: 166KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ