Static task
static1
Behavioral task
behavioral1
Sample
2ba73d80f79c4b508c6aadb3a28f83fed86c6eeb7fafafc7570407db0442ad1f.zip
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2ba73d80f79c4b508c6aadb3a28f83fed86c6eeb7fafafc7570407db0442ad1f.zip
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
e974a31363b2a6d9ce923bc771cc2eb3e9f2162da33b1e101d10e49d9c84576d.exe
Resource
win7-20240729-en
Behavioral task
behavioral4
Sample
e974a31363b2a6d9ce923bc771cc2eb3e9f2162da33b1e101d10e49d9c84576d.exe
Resource
win10v2004-20240802-en
General
-
Target
2ba73d80f79c4b508c6aadb3a28f83fed86c6eeb7fafafc7570407db0442ad1f
-
Size
83KB
-
MD5
6438b16bc45929bab31164a85facae77
-
SHA1
fb6506297e8e5887aaf8b9f7221a7f3fb8b2040a
-
SHA256
2ba73d80f79c4b508c6aadb3a28f83fed86c6eeb7fafafc7570407db0442ad1f
-
SHA512
e1a075c1d3531550d2818b7d1c7e47c095740f41cf63c420ee2ae9bdb0493eab8aafa1e789e057a85431f0f81fca3d6c6f3c9aab838cdfa40899a7d2627823a7
-
SSDEEP
1536:IOScuN5DyZ0cWSBniphXaY28bJzNF1GMFVnv5bQ+0BNWCGfggXy/gJPfYtTcVuqd:b6cZ0c8fuwnAMlsFzGfBEMPf3V7VCm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/e974a31363b2a6d9ce923bc771cc2eb3e9f2162da33b1e101d10e49d9c84576d
Files
-
2ba73d80f79c4b508c6aadb3a28f83fed86c6eeb7fafafc7570407db0442ad1f.zip .ps1 polyglot
Password: infected
-
e974a31363b2a6d9ce923bc771cc2eb3e9f2162da33b1e101d10e49d9c84576d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 188KB - Virtual size: 185KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ