Static task
static1
Behavioral task
behavioral1
Sample
2864e5eeb7fb6296540d676d6bf238e63b1fc600a55889e2bb47196483501a01.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2864e5eeb7fb6296540d676d6bf238e63b1fc600a55889e2bb47196483501a01.exe
Resource
win10v2004-20240802-en
General
-
Target
cad3afb8efb36a88504ee1f292c384e5.zip
-
Size
127KB
-
MD5
38f009784de9389e4e20123815bce25c
-
SHA1
8ed2dc4d59cb743e2c29d70d9b4628b0d0ec22d7
-
SHA256
c5d04693d037d004a141fb86e859a742c7032f92b8ce3672aef933529381c086
-
SHA512
152a1aecd4528e84806e06fa4250923af3737f20f44c66901629f5c7aae3297aad9f55b2a1c6ed464d8aeaa54dd3e7c43c433eb26d216e07026771e77a637d36
-
SSDEEP
3072:xiU7NiAv8LI5gX5R2XdEc97gzEQWJWDlu0IB:xieUI5y5R2Z9szEQUWDlLIB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/2864e5eeb7fb6296540d676d6bf238e63b1fc600a55889e2bb47196483501a01
Files
-
cad3afb8efb36a88504ee1f292c384e5.zip.zip
Password: infected
-
2864e5eeb7fb6296540d676d6bf238e63b1fc600a55889e2bb47196483501a01.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ