Static task
static1
Behavioral task
behavioral1
Sample
6edf654bf63a7d6e0254e2e65a12ea92f1da10d5105e9c66d9ff2b7a0f8fe51c.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6edf654bf63a7d6e0254e2e65a12ea92f1da10d5105e9c66d9ff2b7a0f8fe51c.exe
Resource
win10v2004-20240802-en
General
-
Target
9bd1244360baa86986364a4e8061e06b.zip
-
Size
127KB
-
MD5
8e719d084d446d7757e5cf9ca6590f58
-
SHA1
6d7ae9f50336fbbc755af5e70a13cdb0ba205f53
-
SHA256
d6aac1cc8dd62443230651b084b03048d49ca7c60f3919fd583870f15e1bdfee
-
SHA512
a56b83a7994e17f621075fff5b9b6d6577a47dee0f713b032dc13ec7cefe949d7fb2f8f2fb8131b8120479bedf833c573befaccbe037d9c25ca65a9e659b8b75
-
SSDEEP
3072:vcuLqg7Gbm09u4nQrzYDykR5jawyMZW04A36E4m6bePknKQ6wSv:v7qKGXU4nQrkGADX36GknZ6Bv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/6edf654bf63a7d6e0254e2e65a12ea92f1da10d5105e9c66d9ff2b7a0f8fe51c
Files
-
9bd1244360baa86986364a4e8061e06b.zip.zip
Password: infected
-
6edf654bf63a7d6e0254e2e65a12ea92f1da10d5105e9c66d9ff2b7a0f8fe51c.exe windows:63748 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ