Static task
static1
Behavioral task
behavioral1
Sample
6d6b6f8bcb42fa33fe264068cf12d7608490de8f0105375ac5010458d3e52435.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6d6b6f8bcb42fa33fe264068cf12d7608490de8f0105375ac5010458d3e52435.exe
Resource
win10v2004-20240802-en
General
-
Target
bfb3554ee5597c048d5c6554bbb95b16.zip
-
Size
127KB
-
MD5
bfa7606109e11f14f353fea7fa9d7851
-
SHA1
4e5dc01f7656d263d175bd5521b5df6f96c0888a
-
SHA256
36c784a9dfe3b7da783988ef6af601214e257165446bfa03782cfa5e53c5fe2a
-
SHA512
46aef64b8cb2c1e96a6c65d1dc35ea35a941d4fa3c25dcd6b6586c5e5803363f4920aa3f6f95b5abdb129604efb38a4a30f510f9258e9446836ec169561faf81
-
SSDEEP
3072:PbxmCLWrKQ6eYMMJ9nMmDPItECAuXkfUS7gGCEvUmHL+FwoWtY7EKupR:Pb0cQjSJtlUEjsScMUK+uptYAKupR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/6d6b6f8bcb42fa33fe264068cf12d7608490de8f0105375ac5010458d3e52435
Files
-
bfb3554ee5597c048d5c6554bbb95b16.zip.zip
Password: infected
-
6d6b6f8bcb42fa33fe264068cf12d7608490de8f0105375ac5010458d3e52435.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ