Static task
static1
Behavioral task
behavioral1
Sample
83ff030380aa67eeb98c5be76db2c3f3aa96846156202c809b9134064986aa8c.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
83ff030380aa67eeb98c5be76db2c3f3aa96846156202c809b9134064986aa8c.exe
Resource
win10v2004-20240802-en
General
-
Target
fcbc1e4a2021b6cd8f574cda335fa87b.zip
-
Size
70KB
-
MD5
4eb63f297762f9ba707381e064b651d7
-
SHA1
b7b637787b8de3b74f9a320b63da9705f77a1222
-
SHA256
2d4156fe877b3d599862f73bb35b46baddf9a4152b806563aee991b62d160f72
-
SHA512
088170a536e8eb75bd9bd926a4d8222532c6141f9101372ed68bc8dd6b8cda7787892f1d1ec2403659c535dcc5f204b5d1c700c25bb2b6c6dfa2b6e2a74afe3e
-
SSDEEP
1536:T7PqA9LmXI1WAsEa+yHbAslhd8n5RjU3y7xgrQJaSVumP67OF:3xJmXjdEild8nLjj7xRE7OF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/83ff030380aa67eeb98c5be76db2c3f3aa96846156202c809b9134064986aa8c
Files
-
fcbc1e4a2021b6cd8f574cda335fa87b.zip.zip
Password: infected
-
83ff030380aa67eeb98c5be76db2c3f3aa96846156202c809b9134064986aa8c.exe windows:4 windows x86 arch:x86
Password: infected
908e67f8b0160bfd82132ad8738bb56b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
atl
ord47
gdi32
BitBlt
gdiplus
GdiplusStartup
msimg32
AlphaBlend
msvcrt
atoi
ole32
CoInitialize
oleaut32
SysAllocString
shell32
DragFinish
shlwapi
StrToIntExA
user32
GetDC
wininet
InternetOpenA
Sections
.MPRESS1 Size: 67KB - Virtual size: 564KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE