Static task
static1
Behavioral task
behavioral1
Sample
e275d758fc1b8567e220410d398ea7c193cace7ea7c8ea8a38cc5edc05217bea.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
e275d758fc1b8567e220410d398ea7c193cace7ea7c8ea8a38cc5edc05217bea.exe
Resource
win10v2004-20240802-en
General
-
Target
26ff7b94a913f32e701db7d917261b30.zip
-
Size
127KB
-
MD5
10bb50114fb8bc3cfd9695dedb3b2e8d
-
SHA1
f05aaed882ebc1e3265d3e204ce687fd0e717c43
-
SHA256
e20eac932ad44c9d719f848d006ace03c5b57b3f2eef814b081b2b6eb0c35f8d
-
SHA512
6bfc479d8e0f8a9d5000cdfb92e52c33469427a4bfe947cda99ad62000c1a7ed9bbafb9e152657ca9faca4190629ef8c8ff592e137132fefde3601174af2a121
-
SSDEEP
3072:Yiebzo+DaSqM1wLk1PeoLcZaGLJbfTUdFA/Au/GC+MA+Sp:xevo+DFZwMjLNsHx/ozp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/e275d758fc1b8567e220410d398ea7c193cace7ea7c8ea8a38cc5edc05217bea
Files
-
26ff7b94a913f32e701db7d917261b30.zip.zip
Password: infected
-
e275d758fc1b8567e220410d398ea7c193cace7ea7c8ea8a38cc5edc05217bea.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ