Static task
static1
Behavioral task
behavioral1
Sample
13a5d6143f425f470b8e8084017040828cb164e0132f31877cfe346c31be86a1.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
13a5d6143f425f470b8e8084017040828cb164e0132f31877cfe346c31be86a1.exe
Resource
win10v2004-20240802-en
General
-
Target
5651f61e9382ccd6cb50eb06c94c22cf.zip
-
Size
127KB
-
MD5
c64ecef022b2db57d69eeb3d8355cc87
-
SHA1
6edd7f7e510364e54292ae39f4d3eb8b56e85d67
-
SHA256
36b752bef6ee58a25842a8ddcecda0fb36f045f5af9b1d688e12787dbee0c381
-
SHA512
3754eae790d0cbc4825eb64ebbac77c7ed14ec0a061dabdb05e0d61fb6170e6c3b602a794acbbd165ce85cacb516c026a1d1a330e2ff8ffb52988a417df1af44
-
SSDEEP
1536:+x3aGLMxv78lIgfcjhIMeKmElDOojoA7Enr7RcG972uA3thcdp21F4hMKyCTX67y:+M1yI0n9MlDimG9KHtVOhMKFxDP2qRB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/13a5d6143f425f470b8e8084017040828cb164e0132f31877cfe346c31be86a1
Files
-
5651f61e9382ccd6cb50eb06c94c22cf.zip.zip
Password: infected
-
13a5d6143f425f470b8e8084017040828cb164e0132f31877cfe346c31be86a1.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ