Static task
static1
Behavioral task
behavioral1
Sample
cc405e27cf3c45f22534764ed6c2c3d7dc46264b4c275cfc53b3cf6707c211a5.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
cc405e27cf3c45f22534764ed6c2c3d7dc46264b4c275cfc53b3cf6707c211a5.exe
Resource
win10v2004-20240802-en
General
-
Target
f777ab88e7988a6197689c84bd5c200b.zip
-
Size
139KB
-
MD5
272f24e38415918b08107bb95e5d4364
-
SHA1
702a8daad99b19b84b21c8007c0c55a84b036e7c
-
SHA256
d3ad591f0689b854fe488a00451cafca5f4497ca7ca77718ee48195ad213d830
-
SHA512
b6f6f2b4de2838bdbd43b54b3a0f98f5e96eb717c052df3916cf2fcd9de87cee037baa704cdc242eee0bf1ece5c357637d68cb267e3d4f6c4dfd24ddaa6cc932
-
SSDEEP
3072:M+SAS9GztiBgdbBc7H+IA38D+tgKSwrMn8GvwOY3jmCLGQg/U/VT:M+ik/PI7DHJw4lwO+XGn/K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/cc405e27cf3c45f22534764ed6c2c3d7dc46264b4c275cfc53b3cf6707c211a5
Files
-
f777ab88e7988a6197689c84bd5c200b.zip.zip
Password: infected
-
cc405e27cf3c45f22534764ed6c2c3d7dc46264b4c275cfc53b3cf6707c211a5.exe windows:5 windows x86 arch:x86
Password: infected
45b3bc45f71f6d9e40582b43454bd6fe
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetEnvironmentVariableA
TlsGetValue
VirtualAlloc
DeleteFileW
GetModuleHandleW
CreateEventA
SetSystemTime
GetCurrentDirectoryA
CreateMailslotA
LoadLibraryA
SleepEx
GetCurrentThread
OpenJobObjectA
GetShortPathNameA
MoveFileExW
WaitForSingleObject
OpenEventW
TerminateProcess
CreateFileA
RemoveDirectoryW
comsvcs
RecycleSurrogate
SafeRef
CoCreateActivity
ctl3d32
Ctl3dEnabled
Ctl3dCtlColor
Ctl3dUnregister
Ctl3dGetVer
Sections
.text Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
udata Size: 1024B - Virtual size: 704B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ldata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_MEM_READ
.relc Size: 10.0MB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE