Static task
static1
Behavioral task
behavioral1
Sample
17b499a7545a991cb173bbb3beb2dcca2fa801d9c3cb66a30d902a29beb85b47.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
17b499a7545a991cb173bbb3beb2dcca2fa801d9c3cb66a30d902a29beb85b47.exe
Resource
win10v2004-20240802-en
General
-
Target
a5b3c1f3b1bd4a785deca66cda8ca7e0.zip
-
Size
163KB
-
MD5
aea0b0f7ad5fec691588b922c9a9a1b9
-
SHA1
29fc494214405fc2c459581c6d2644e352b474d4
-
SHA256
19c1773e60de3c37510dd7a17f15f03f453da9d8811676823e642163a8bf7ee8
-
SHA512
2f330a8d3b822fe342ae37f54340103b1ffeefe09f83ccfaa2b276925fb9b95740f0887b99b87c804db5b528ffc1256078cfa0b8380e8498bd13194cc519174d
-
SSDEEP
3072:z3zF8VShqAebDv2NqIEjBucHoOR1HuWmSi1xvd+H5Nub0USpj+GE0A5PL6fo:Dx8VSUAO2NfEjBXHb1EfQY6E0G/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/17b499a7545a991cb173bbb3beb2dcca2fa801d9c3cb66a30d902a29beb85b47
Files
-
a5b3c1f3b1bd4a785deca66cda8ca7e0.zip.zip
Password: infected
-
17b499a7545a991cb173bbb3beb2dcca2fa801d9c3cb66a30d902a29beb85b47.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 162KB - Virtual size: 552KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE