Static task
static1
Behavioral task
behavioral1
Sample
08e36d45beda6a0bffcbcc8b56d7756048ed258b6bf8475082d7b1bdf8fd4487.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
08e36d45beda6a0bffcbcc8b56d7756048ed258b6bf8475082d7b1bdf8fd4487.exe
Resource
win10v2004-20240802-en
General
-
Target
949ac5b4cb8d932f069e456329c3cfde.zip
-
Size
127KB
-
MD5
83b18ef34f5cfeecb312996377362794
-
SHA1
a871ebcf3167248da1afb2d5eaaccde007e84b45
-
SHA256
9c2c9344ab8c22a85a2d34e6336d4aaa2c941bbc9c1e2eb4476fe51c1ebf14d9
-
SHA512
f8e52c9362d26d28398ed968de664d58fd94f094e2f636cceb1adb1361275f2c51db8dc33c375c7534f1d9cfb1ba61b713ff1e64b4d8506b98e9f15a907ed9a6
-
SSDEEP
3072:b9MfgB+zK11G2Sab0Hcuy9asM7pJbgmwVQikpS+8qVu:bKYB+zKWah9asM7Em3lAQVu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/08e36d45beda6a0bffcbcc8b56d7756048ed258b6bf8475082d7b1bdf8fd4487
Files
-
949ac5b4cb8d932f069e456329c3cfde.zip.zip
Password: infected
-
08e36d45beda6a0bffcbcc8b56d7756048ed258b6bf8475082d7b1bdf8fd4487.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ