Static task
static1
Behavioral task
behavioral1
Sample
8d951ddeb596a7882c0a45b310721d4896bcd8da52f6e35d75c43102c053d8ac.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8d951ddeb596a7882c0a45b310721d4896bcd8da52f6e35d75c43102c053d8ac.exe
Resource
win10v2004-20240802-en
General
-
Target
74952825d9f7ae35b04e462f75c5fdc1.zip
-
Size
128KB
-
MD5
a7a3763a195b86fce9527700bfec6ee5
-
SHA1
b82beb5f679053b88466bbea098833b7d6b50133
-
SHA256
d8b575d1ac525a05d297f87768d5cd3618f3cb0a9a99786decfa091f3a788d4b
-
SHA512
60a847513ecc3de5043724acd19978adcdd8ced2ccb341ca3762ade0359d4192ac3d7879ab470d86de33bf80dd8a4f44a87c84af582d67cc810c5aa7c4638c39
-
SSDEEP
3072:Arbt/NoRS2WTOkvS33Mj6gHsiAYUOFmeesw8ri:APt1F2eOkvSY6gM2FmehwEi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/8d951ddeb596a7882c0a45b310721d4896bcd8da52f6e35d75c43102c053d8ac
Files
-
74952825d9f7ae35b04e462f75c5fdc1.zip.zip
Password: infected
-
8d951ddeb596a7882c0a45b310721d4896bcd8da52f6e35d75c43102c053d8ac.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 14.7MB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ