Static task
static1
Behavioral task
behavioral1
Sample
0dabe732596cb6c710219b054240243f6253dc2831e158d14d737f919c10ec9d.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
0dabe732596cb6c710219b054240243f6253dc2831e158d14d737f919c10ec9d.exe
Resource
win10v2004-20240802-en
General
-
Target
de44647b437f963a274459c1fa5000ed.zip
-
Size
127KB
-
MD5
d513dd45daef658369b6fbf79c86acb2
-
SHA1
2ad90f23b303d79d5a663e2aa41b99b6bb58e49b
-
SHA256
84b04e86689c27ee756a7aa6267b946549d5e34e990893a4d7277420384c2e3d
-
SHA512
4a34d84865349e8b72581615c9998dc9cc244ce2d9746bca719f813eb2ba16553c53fe287b0105acd20c8bdc70b1c34b2ed804b870b69f8e51ae437f17f8e6a5
-
SSDEEP
3072:zL6jSumGXkZ7xOoCpoC4BGGW/VJVXg8f9yZ/bWA:zL0SuVkZ9OHZM9W/VTXssA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/0dabe732596cb6c710219b054240243f6253dc2831e158d14d737f919c10ec9d
Files
-
de44647b437f963a274459c1fa5000ed.zip.zip
Password: infected
-
0dabe732596cb6c710219b054240243f6253dc2831e158d14d737f919c10ec9d.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ