Static task
static1
Behavioral task
behavioral1
Sample
a71f83257783f9390c214bdf752674a05f05323d6754cb2511ac8b4eccdd2af8.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a71f83257783f9390c214bdf752674a05f05323d6754cb2511ac8b4eccdd2af8.exe
Resource
win10v2004-20240802-en
General
-
Target
8f9f493df71dc54205619f6e7771dad7.zip
-
Size
127KB
-
MD5
cb4e66d6b05569ea37a3a4afb7ab977a
-
SHA1
3e673c684a1dff923f3d6269f2dd77ac60a1faea
-
SHA256
d7e93098b514740f6a2eccdc13f5fb4f8404a264d5418dd0235fc637182fcc33
-
SHA512
1a310bb4873b5a67c91f58f7f7ae55b70b2659197e758bd60613daef73b94229cdd13c36b1eb649325b64a01a9135cf51f1688cdd71b83c00b3928dcf496e828
-
SSDEEP
3072:8/be2XeOfbqz66ZXvyIJo78IcmMbDKwXNglHiQIP+76:OXN2z66Zfm7T6DKwXNgl8Ph
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/a71f83257783f9390c214bdf752674a05f05323d6754cb2511ac8b4eccdd2af8
Files
-
8f9f493df71dc54205619f6e7771dad7.zip.zip
Password: infected
-
a71f83257783f9390c214bdf752674a05f05323d6754cb2511ac8b4eccdd2af8.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ