Static task
static1
Behavioral task
behavioral1
Sample
1b528d88317872bbda6deff1e25d269fc85fde0a707d257ef72274cc67096a56.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
1b528d88317872bbda6deff1e25d269fc85fde0a707d257ef72274cc67096a56.exe
Resource
win10v2004-20240802-en
General
-
Target
51f216424370c2a10cde2fdb0704d0a8.zip
-
Size
128KB
-
MD5
90aa61bfa7cc7ebcb200675c82bab7a0
-
SHA1
7113b2da45c20409bccafa693531ef11a8ed1b0b
-
SHA256
76e35f7a7dfd7047a924f553a2dfc90c9f7f558c47ba54c56f00538b7c8c3b9c
-
SHA512
9482bec3cb2a2f121c1b4370386833d375ab8ce56cc9db6dadf96f9ec975b4f32dc533850fb35f37875d4fd1e9239817f9b42c7c0b6dd591b84b810f5979eeff
-
SSDEEP
3072:aVYjsc/WJhrBlZv+uUfpMgRPIDDfipQHcueu5rUt0bVhdE6RpG0kQVE/jiI9k:aVvc/WPtT+MgRPyfiC8XuFPNs0kWELiN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/1b528d88317872bbda6deff1e25d269fc85fde0a707d257ef72274cc67096a56
Files
-
51f216424370c2a10cde2fdb0704d0a8.zip.zip
Password: infected
-
1b528d88317872bbda6deff1e25d269fc85fde0a707d257ef72274cc67096a56.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ