Static task
static1
Behavioral task
behavioral1
Sample
e6d85224f890be95ea71f2694ae3bb80b24a48f0c4efa7ff7d74d412ed892aca.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
e6d85224f890be95ea71f2694ae3bb80b24a48f0c4efa7ff7d74d412ed892aca.exe
Resource
win10v2004-20240802-en
General
-
Target
455f3d99c987cc6d5d69b769230d4f08.zip
-
Size
631KB
-
MD5
5c4488958f83a0f6416f663a208ab42a
-
SHA1
02ce07406c36606da23a2ca572a70407f12a3348
-
SHA256
52049ab7872f4cf7fd68be594c48f8f77f51cad495694fe7d351ce26f8b65eeb
-
SHA512
2098b521c44fc4b0c1ce0e5d9a9f5b76a9c96e83271040e6734928fdd05cb12b194d135486ba6e23bd7fce8e1aab54ab5597eafe3ada12d53a705b9d35ee9944
-
SSDEEP
12288:XbVGSWpfMAy0H9ujFcWdGBGNu7o2X0kwG9FIROvEhE8KPl7HimTuSJazH7W:LY5yARH9ujFcYPk7oAZf0ROvEhh0lDiG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/e6d85224f890be95ea71f2694ae3bb80b24a48f0c4efa7ff7d74d412ed892aca
Files
-
455f3d99c987cc6d5d69b769230d4f08.zip.zip
Password: infected
-
e6d85224f890be95ea71f2694ae3bb80b24a48f0c4efa7ff7d74d412ed892aca.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 637KB - Virtual size: 637KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ