Static task
static1
Behavioral task
behavioral1
Sample
f663ed81f5492b9f10f689373b770db4b6e5abc9950447bd63eb92a14938ffce.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
f663ed81f5492b9f10f689373b770db4b6e5abc9950447bd63eb92a14938ffce.exe
Resource
win10v2004-20240802-en
General
-
Target
18514428127.zip
-
Size
114KB
-
MD5
d5bbc86095574bae2fc2781300a225dd
-
SHA1
bef860a6f6c163a0fdd3e107130e8818627cd5c5
-
SHA256
b8cd33c592d906e4307f636d2359be5a015bb99b5722d741ca2a382dc74cb242
-
SHA512
4dfddf21e5b886e1f0da46ee230c25e7004e6eb75e044b91430efbf8a16a892c9bc6b0f9da81fb00f2264f298fb8e2acc293d49b0e40521cd2d2022bf9880de0
-
SSDEEP
3072:D5VLUt4SqSvHymBTCvC9qlaJJN/O6NjDV1JQaeHbro:DjLfS6oT8+q8JJ0AjJ1iaobU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/f663ed81f5492b9f10f689373b770db4b6e5abc9950447bd63eb92a14938ffce
Files
-
18514428127.zip.zip
Password: infected
-
f663ed81f5492b9f10f689373b770db4b6e5abc9950447bd63eb92a14938ffce.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ