Static task
static1
Behavioral task
behavioral1
Sample
d09d2dab6ebda9b2030115d0c6f131fa7b5bd37a831c933b37f07b64b2a9b11b.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
d09d2dab6ebda9b2030115d0c6f131fa7b5bd37a831c933b37f07b64b2a9b11b.exe
Resource
win10v2004-20240802-en
General
-
Target
12fc43a5e8cd351708cc9a4e16f7af10.zip
-
Size
127KB
-
MD5
e607bd97882cb56af4710d3d9152aa43
-
SHA1
383b85f553dcbe77c7efaa93e0bb45dec2c3111e
-
SHA256
46219498c4ee46d27e67a3d6c54c65655c11943c781a06e6feb3520796dc9c88
-
SHA512
21dcd71539040e15ca7c9417f3d98a55732136d2f9dc42ab5dc1aa496d364881ccca3fedba46f2498dffadf5f2dd476b736e2b0ef81a2e7c20e260f78fa4bf65
-
SSDEEP
3072:8tvooA4XNo1HF8W4+H7nK9y0vWna5v3v9BU2MT:8tvjUF7x0unaprU2o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/d09d2dab6ebda9b2030115d0c6f131fa7b5bd37a831c933b37f07b64b2a9b11b
Files
-
12fc43a5e8cd351708cc9a4e16f7af10.zip.zip
Password: infected
-
d09d2dab6ebda9b2030115d0c6f131fa7b5bd37a831c933b37f07b64b2a9b11b.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ