Static task
static1
Behavioral task
behavioral1
Sample
57615dc0ce2d330e4875fab9e73ab067fb75d00821f0dd8697ee2fd8c3c68f8b.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
57615dc0ce2d330e4875fab9e73ab067fb75d00821f0dd8697ee2fd8c3c68f8b.exe
Resource
win10v2004-20240802-en
General
-
Target
13d2c32c0c9d99c18f59779553c8afb4.zip
-
Size
83KB
-
MD5
c19355370511a2bf2f94c73bde395bb8
-
SHA1
5f6c29908b945a30d4ad7b40dcff483cb0682312
-
SHA256
5b9f0c0ae022498663eaa86c4ba400ee3d03f4424df1bd4e08e5edb26c11c5d7
-
SHA512
648d0f0c80fb404cc3c00325f70a722e03db07c977954f99d9c57197aa98bc3558b58802b49688aed10a0bf08befdaeb18dfcf0935c209779f86c18a58de9aba
-
SSDEEP
1536:lFwQKwc+qd6n20qUUKx8JVZTpGRvvBeH80RvM6XWrME:lFwQLc+qePqUkntGxBeH8uvdif
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/57615dc0ce2d330e4875fab9e73ab067fb75d00821f0dd8697ee2fd8c3c68f8b
Files
-
13d2c32c0c9d99c18f59779553c8afb4.zip.zip
Password: infected
-
57615dc0ce2d330e4875fab9e73ab067fb75d00821f0dd8697ee2fd8c3c68f8b.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 188KB - Virtual size: 185KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ