Static task
static1
Behavioral task
behavioral1
Sample
59263b000a125c32e3fa84e020fa1950aff0276f2f40320161229de3f0e57709.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
59263b000a125c32e3fa84e020fa1950aff0276f2f40320161229de3f0e57709.exe
Resource
win11-20240802-en
General
-
Target
3e5004c09dcb63de0d6e0217ee7de690.zip
-
Size
28KB
-
MD5
9bd0b0b71d08bcc321d7e9896e14eacb
-
SHA1
4c8a3996b2c558d0707fa0fd3c2bdb02ded9ea0d
-
SHA256
2d1cbd0d8cfa7d43936e209075f6e1c2577d186ce7dee30bd43e9b9388dc9903
-
SHA512
a8d9c56dcf0a7c61b01726af1f0a1fdbeec63dcd1cdad07dc46d454cfd1a2cdd3bf926db4133b3e22b03314b4babbc7029df6bc0e77d6e9c87cde2ef6b2bd159
-
SSDEEP
768:MZMX7Wj65WTf/HbtC9RZSHOihwrXrV/5cgoJOWRxFt:iw+zTfTt4ZPrXrncBJb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/59263b000a125c32e3fa84e020fa1950aff0276f2f40320161229de3f0e57709.mal_
Files
-
3e5004c09dcb63de0d6e0217ee7de690.zip.zip
Password: infected
-
59263b000a125c32e3fa84e020fa1950aff0276f2f40320161229de3f0e57709.mal_.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
Sections
.text Size: 58KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ