Static task
static1
Behavioral task
behavioral1
Sample
9d7c5099c8e9717b2fb545fc8d71cf268dccaa509839908ed0054f1fc54aae78.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
9d7c5099c8e9717b2fb545fc8d71cf268dccaa509839908ed0054f1fc54aae78.exe
Resource
win10v2004-20240802-en
General
-
Target
56cf3e8686714f5165d2710144947f4d.zip
-
Size
169KB
-
MD5
a6a492c7423580edff58e6fa1327424d
-
SHA1
bdf1ee945c2c80d130749ed2de8776ba8904258b
-
SHA256
7726a5892ec6b381ede4313e376ff6dbc2dd6e3869651ffabe322e85ea3ac44b
-
SHA512
0307d620b8066f60d4ced1bab3151851ae9b09bb236af85595cf20c3246587329536873f41ae8eedaa667d7364a954305408810783814ee6f3841cde1cf23356
-
SSDEEP
3072:iLjy+rK+w7p5WQ2qbMHeUy9EKEcLMlz/aR/f87PGxQ5CcUEnOQQBTh0IePSB3XHs:0jzrKRdYQ2qY+U7KtIzyAG+519OQQ//M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/9d7c5099c8e9717b2fb545fc8d71cf268dccaa509839908ed0054f1fc54aae78
Files
-
56cf3e8686714f5165d2710144947f4d.zip.zip
Password: infected
-
9d7c5099c8e9717b2fb545fc8d71cf268dccaa509839908ed0054f1fc54aae78.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
MEW Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�uۊ�� Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE