Static task
static1
Behavioral task
behavioral1
Sample
cf8e3df6e873768005362e61de243fbb4c0392f612f1a23d63099fb973a91cbb.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
cf8e3df6e873768005362e61de243fbb4c0392f612f1a23d63099fb973a91cbb.exe
Resource
win10v2004-20240802-en
General
-
Target
2989af1cbdb4ba10ddff0006b22e13bc.zip
-
Size
190KB
-
MD5
d190c533420117bc24b343abb4154181
-
SHA1
f0692a468db758247a451c9dbc2afc7750446e14
-
SHA256
3cec39e14f0398d4c8379e290bc0997d4efad474bc806f1ece0dceafc8e2a184
-
SHA512
76028c36057ac5a30648db6fedf94d0e99d2f5f59149dd15dd14f23dab5f1d874c21b34dcfdb7d34bad830996e94cd8316709a8aa0b16ad0ac1f5a3121d76647
-
SSDEEP
3072:l0loMzgt1zLE6u4enGiRGmlSVZH5U+xuo6XEtiX1RwIeheofhDolPlVq72O:lKlzOxLEdTG4fQH5U+xdptE/wJlJ8RqT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/cf8e3df6e873768005362e61de243fbb4c0392f612f1a23d63099fb973a91cbb
Files
-
2989af1cbdb4ba10ddff0006b22e13bc.zip.zip
Password: infected
-
cf8e3df6e873768005362e61de243fbb4c0392f612f1a23d63099fb973a91cbb.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 279KB - Virtual size: 278KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE