Static task
static1
Behavioral task
behavioral1
Sample
e7cc186df9fe2cd25c56dc5ccafe89815a5604938fe080af2bd0d08cca093f52.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
e7cc186df9fe2cd25c56dc5ccafe89815a5604938fe080af2bd0d08cca093f52.exe
Resource
win10v2004-20240802-en
General
-
Target
b2c24f14809388b55248e17d1e834d76.zip
-
Size
127KB
-
MD5
d30a8f068d915d9389d489623a04f485
-
SHA1
8ef86943fc23f602e2aa4a97449715b62bbbc769
-
SHA256
358930ff2608e54626775bb55c52d40860f99ca2abc30681fc3e7b36e4078a4a
-
SHA512
dac58e9d492eefd0ee12abe964f572ed4c7c231ee57a0798aab89de5d9520b5a7f6de275af30f95aac65fb3b25277b4701ce7758273841efe659fc35bf93b279
-
SSDEEP
3072:C6fm1mVX8aFT/i/gajEUtImvRZ++YwabXUQuibw:Ccm1m5RIljh1++YwsEniM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/e7cc186df9fe2cd25c56dc5ccafe89815a5604938fe080af2bd0d08cca093f52
Files
-
b2c24f14809388b55248e17d1e834d76.zip.zip
Password: infected
-
e7cc186df9fe2cd25c56dc5ccafe89815a5604938fe080af2bd0d08cca093f52.exe windows:63748 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ