Static task
static1
Behavioral task
behavioral1
Sample
cd034562fe0dbc6f78b32a950e104a7de561eb0be7653f014998bd08e44f259b.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
cd034562fe0dbc6f78b32a950e104a7de561eb0be7653f014998bd08e44f259b.exe
Resource
win10v2004-20240802-en
General
-
Target
3e0d5ec94cef742a97d18e4adebc9130.zip
-
Size
182KB
-
MD5
217b1a3f3dd567ccdda6011219e903f1
-
SHA1
f2fd66f31d74b00fff13efd56e408c45097d1e24
-
SHA256
026d08fecb93e80cff49b87afbad318261b390f1f3b57013e28b2c15fb2f8213
-
SHA512
ec804a1575cdbcf657c2c1ad381ee917f1692d584f75ce331b3fc9180e4a65f574441d34c9a627289896646fbf2530050a939e81d08a079084c937c733eba256
-
SSDEEP
3072:eWczhhq7t3VrYdGmhtwdH9kxjvpJ7mInkW1S4i+6pmA3CLk3xRGBcPVP7eeH:SzhhGj4KdIjvpd/B1xi+6pmAyLKx0BUn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/cd034562fe0dbc6f78b32a950e104a7de561eb0be7653f014998bd08e44f259b
Files
-
3e0d5ec94cef742a97d18e4adebc9130.zip.zip
Password: infected
-
cd034562fe0dbc6f78b32a950e104a7de561eb0be7653f014998bd08e44f259b.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 240KB - Virtual size: 239KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE