Static task
static1
Behavioral task
behavioral1
Sample
dfd1902d7d22f02a3c8d3b2462781ef3ac007b12d35c98609a8d728700d694e7.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
dfd1902d7d22f02a3c8d3b2462781ef3ac007b12d35c98609a8d728700d694e7.exe
Resource
win10v2004-20240802-en
General
-
Target
b8c06eb13919428af211cd387df7135c.zip
-
Size
2.3MB
-
MD5
6cf7704e12169e538495d08e4136a3bc
-
SHA1
db1a07d80f4f0f17c2661e775bca702732dd8268
-
SHA256
fa86f81f619db1f891ee60752f38722eb44b54de40115d90e740889bc78e9493
-
SHA512
f4045c781463f405b27ec9e3ea14986d30f6ce7736e709cb2cb748b306f1a44c98be2c835ce503755fbe620dfceb45b23a8e3bb30c2e5f69690221378135e29f
-
SSDEEP
49152:1/AFtxXTDYGrbXEhtaqURykCQKQMYcSWETFrCiD0X/ilwkvZwxpIQocdQF1j:1oJjDjEhtaDAkQBYud7KlCGQocWD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/dfd1902d7d22f02a3c8d3b2462781ef3ac007b12d35c98609a8d728700d694e7
Files
-
b8c06eb13919428af211cd387df7135c.zip.zip
Password: infected
-
dfd1902d7d22f02a3c8d3b2462781ef3ac007b12d35c98609a8d728700d694e7.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
yzPzORmq Size: - Virtual size: 100KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
TGOqOPny Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
��{� Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
aDZzfGdq Size: 8KB - Virtual size: 8KB
vvpvHAtG Size: 8KB - Virtual size: 7KB
kBAnAKFq Size: 54KB - Virtual size: 54KB
BwKxROnX Size: 268KB - Virtual size: 268KB
ADpypOFm Size: 11KB - Virtual size: 11KB
SadNOOui Size: 327KB - Virtual size: 327KB
hGfauKpS Size: 29KB - Virtual size: 28KB
bdYDZqxw Size: 48KB - Virtual size: 47KB
BVDzhiWl Size: 10KB - Virtual size: 9KB
UEnxXbfC Size: 70KB - Virtual size: 70KB
XLVgZdcE Size: 37KB - Virtual size: 36KB
CwJaKlvD Size: 1024B - Virtual size: 649B
mTywqetX Size: 16KB - Virtual size: 15KB
RlEDMlMI Size: 7KB - Virtual size: 6KB
ziuHDRUY Size: 107KB - Virtual size: 107KB
rFnPFmGb Size: 6KB - Virtual size: 5KB
VDtiliKa Size: 1024B - Virtual size: 591B
qbVOotXR Size: 376KB - Virtual size: 376KB
FdawSusU Size: 126KB - Virtual size: 125KB
VmVYKrvo Size: 260KB - Virtual size: 260KB
EoDulhpU Size: 9KB - Virtual size: 8KB
BQSwrUaW Size: 156KB - Virtual size: 155KB
vHEokRKm Size: 53KB - Virtual size: 53KB
NIvOAsmT Size: 12KB - Virtual size: 11KB
JdSypjPf Size: 37KB - Virtual size: 36KB
EJuKQyAE Size: 15KB - Virtual size: 15KB
kagJzEGe Size: 43KB - Virtual size: 43KB
bfSebfIb Size: 17KB - Virtual size: 17KB
OBERTIbU Size: 3KB - Virtual size: 2KB
lPwWKrND Size: 41KB - Virtual size: 40KB
hHAzDTGE Size: 11KB - Virtual size: 10KB
VkEollSt Size: 59KB - Virtual size: 59KB
DqknrGmm Size: 18KB - Virtual size: 18KB
BXcOkqYU Size: 66KB - Virtual size: 65KB
pxwDEUje Size: 61KB - Virtual size: 61KB
sCMXeaol Size: 22KB - Virtual size: 21KB
PGZJfHiK Size: 11KB - Virtual size: 11KB
aFIWANRZ Size: 13KB - Virtual size: 13KB
chueNnVU Size: 18KB - Virtual size: 17KB
rvWcWLoZ Size: 68KB - Virtual size: 68KB
mgdUprWM Size: 87KB - Virtual size: 87KB
tXWyhood Size: 62KB - Virtual size: 61KB
kGkMdthg Size: 61KB - Virtual size: 61KB
IPHyfuhR Size: 58KB - Virtual size: 57KB
idipkHIn Size: 21KB - Virtual size: 21KB
zzAoaeHo Size: 15KB - Virtual size: 14KB
NwGxiJfG Size: 22KB - Virtual size: 21KB
igoelRoT Size: 4KB - Virtual size: 4KB
FgaaJqZd Size: 44KB - Virtual size: 43KB
MiwvNqsP Size: 5KB - Virtual size: 5KB
cBjEOXRM Size: 31KB - Virtual size: 31KB
XuwmkKms Size: 36KB - Virtual size: 35KB
UzqVGsIK Size: 58KB - Virtual size: 57KB
KTewjDhi Size: 8KB - Virtual size: 7KB
lRJxKZnM Size: 39KB - Virtual size: 38KB
JKKIKdQH Size: 6KB - Virtual size: 5KB
hMxBEjSQ Size: 32KB - Virtual size: 31KB
bzybhklN Size: 85KB - Virtual size: 84KB
JrZVRZTD Size: 47KB - Virtual size: 46KB
TUORaOeT Size: 4KB - Virtual size: 3KB
wTIFbSfU Size: 33KB - Virtual size: 32KB
ewwATqvo Size: 512B - Virtual size: 2B
ncppCASM Size: 26KB - Virtual size: 26KB
hBADJpVi Size: 39KB - Virtual size: 38KB
YzosIITu Size: 373KB - Virtual size: 372KB
hKqDYPus Size: 14KB - Virtual size: 14KB
cIAFvKFd Size: 4KB - Virtual size: 3KB