Static task
static1
Behavioral task
behavioral1
Sample
1abf342c788256fea89a96426efba2979f5bba081ed706c95facbdbcb5209f14.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
1abf342c788256fea89a96426efba2979f5bba081ed706c95facbdbcb5209f14.exe
Resource
win10v2004-20240802-en
General
-
Target
989cc6eb3a90d93d47cbdc78230e80508cd821f22d81ddc67765bdbad1d55713
-
Size
83KB
-
MD5
0f2d6d4de720710bca2ad8958b779b33
-
SHA1
6a0f783ff3f60b067fe8e1502b39b9f76b12d5a8
-
SHA256
989cc6eb3a90d93d47cbdc78230e80508cd821f22d81ddc67765bdbad1d55713
-
SHA512
61209c887fd824978bcacf6068b5c9afb31e7fe69043541fb0d792457e5b2b12297dbf355d7097475ed2375eeb60e98a964938430e4162f6d0cdc34cc7b8dcde
-
SSDEEP
1536:KZZVlEmCOINbHi0O/dX+VTGmsqueYFFRveuhAGW2ci4o0CdxBz6TUDoMU8mT8v+u:SZsmCOsBOwfsquBNe5jKbs6oMU8cPu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/1abf342c788256fea89a96426efba2979f5bba081ed706c95facbdbcb5209f14
Files
-
989cc6eb3a90d93d47cbdc78230e80508cd821f22d81ddc67765bdbad1d55713.zip
Password: infected
-
1abf342c788256fea89a96426efba2979f5bba081ed706c95facbdbcb5209f14.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 188KB - Virtual size: 185KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ