Static task
static1
Behavioral task
behavioral1
Sample
61aba9fb3cca670e793240f85ff400e105461b4afad517514deffe81e4626217.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
61aba9fb3cca670e793240f85ff400e105461b4afad517514deffe81e4626217.exe
Resource
win10v2004-20240802-en
General
-
Target
ba7ed824cc163e66ae3acd0a785c6844.zip
-
Size
128KB
-
MD5
6184532bcd943285ff0e6f2a0894950d
-
SHA1
ae7cb615180f797b7a9b58ac480f795c5ba102ba
-
SHA256
5288f097db6b95e99e9c4655e24531ed4a0fd0ed9f1d3701ccd31bf3103fc604
-
SHA512
b0f1e5cb9162e371e221b65a09295910c79c917c546297e1b07197b0dc446eaf9cad0b3e9683b8012a12096fe991c15b28e1023f2837c085626848350d63f610
-
SSDEEP
1536:XhFtNWFl7iYldxES6TkaQiEwwKWVMwvJcmwMRojs7FuwAfoGCxnuJO+gwpnbErty:Rwlh7V0EwwKqCmGfoGCxnu8wpbUOy6D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/61aba9fb3cca670e793240f85ff400e105461b4afad517514deffe81e4626217
Files
-
ba7ed824cc163e66ae3acd0a785c6844.zip.zip
Password: infected
-
61aba9fb3cca670e793240f85ff400e105461b4afad517514deffe81e4626217.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
MEW Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�uۊ�� Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE