Static task
static1
Behavioral task
behavioral1
Sample
195a23f3627ba618c79b46c075ab658db638c95c51e698849a1a066068057804.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
195a23f3627ba618c79b46c075ab658db638c95c51e698849a1a066068057804.exe
Resource
win10v2004-20240802-en
General
-
Target
149926866e87f3bd4329615715538ea0.zip
-
Size
127KB
-
MD5
c6c3f5cdc25dacbb69a46192847b5ec1
-
SHA1
bf6f93f259b9f2f7e66874556ceb1266b10bb489
-
SHA256
6548be8edf15ad789a48474c28bd017b0dda5ecd6a41554c05676ddf77703f55
-
SHA512
7bab39bccb8ce38cf60498cb1088c8b04514e0cde959a5e6eeaca38a940d1ace35d7cfc9f6864884d0a35cb85b9792a88835ad9c4ccc2a7cc83dff522d9dee32
-
SSDEEP
3072:qPR1WBuQSTn/Tn6szVRnPHRRQ2yfYgggLOjx1yeaUPJfxO+9a4o:qPIqLn6szvPHRRQ2yfpgqOjx1yeaUPJ4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/195a23f3627ba618c79b46c075ab658db638c95c51e698849a1a066068057804
Files
-
149926866e87f3bd4329615715538ea0.zip.zip
Password: infected
-
195a23f3627ba618c79b46c075ab658db638c95c51e698849a1a066068057804.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ