Static task
static1
Behavioral task
behavioral1
Sample
5315fbb68ac73b4e26fda2dd1c43e0d3998bd8b80ae843dfb58a7e94cf16dcf2.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5315fbb68ac73b4e26fda2dd1c43e0d3998bd8b80ae843dfb58a7e94cf16dcf2.exe
Resource
win10v2004-20240802-en
General
-
Target
d4b769a5082c2da9f8d5d057a24723e4.zip
-
Size
127KB
-
MD5
8e28415b55ce219f7e5797d64b618e6b
-
SHA1
57c7d670e105ee4c85ce9ec2814c5f99dec819b2
-
SHA256
c8e8a58a17f253568d535122ba6e6a25ff06888745d3f9d2f2e396829f41d25b
-
SHA512
8e37cc21ad58d8a81f37205f8e3892d6e9d7ff324b73aabee95f5477a88d89f6d161176b5c7eaa6cb3ac11abf6b4a6f7b8dc0bd9a862eec4293970b9feb25e87
-
SSDEEP
3072:MLKZUnNiWddS6xco/mUaMQ60NXRxGZTTcT:MCUnNiWdI6xcoOUaMUXRx+UT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/5315fbb68ac73b4e26fda2dd1c43e0d3998bd8b80ae843dfb58a7e94cf16dcf2
Files
-
d4b769a5082c2da9f8d5d057a24723e4.zip.zip
Password: infected
-
5315fbb68ac73b4e26fda2dd1c43e0d3998bd8b80ae843dfb58a7e94cf16dcf2.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 14.7MB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ