Static task
static1
Behavioral task
behavioral1
Sample
2491f8d9789ac9b4a11a6dbeb23f09e3e818127bdea0d03b2cc74aa8592a6f8d.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2491f8d9789ac9b4a11a6dbeb23f09e3e818127bdea0d03b2cc74aa8592a6f8d.dll
Resource
win10v2004-20240802-en
General
-
Target
f7d899f86c0df9e4d4626e8a408a5f9e.zip
-
Size
1.8MB
-
MD5
10f6187a603b99b43165ca53f2a442c0
-
SHA1
3df83cc987221f37944bc451f44c1a44f27006b1
-
SHA256
ec7ed5198a66f1be68458668bb8ebaa5e34f2070dac3c89db13c95192d061140
-
SHA512
501f2b87c8bd4d22e31aa1d21e869dea8717358bb65714fea7f01ffe9aa0bf81443792bff01df0e314810d825d008a8a45a3160e155eedead567dae57d4a5807
-
SSDEEP
24576:AGQCy3HmkebJ/o8w/PfNi9muisTkaZ9qgnQuhqHkg++l+cP44B83KQ33DK4Qdx:ECwReW/PfEmuB99+CGkilNB8J24Ox
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/2491f8d9789ac9b4a11a6dbeb23f09e3e818127bdea0d03b2cc74aa8592a6f8d
Files
-
f7d899f86c0df9e4d4626e8a408a5f9e.zip.zip
Password: infected
-
2491f8d9789ac9b4a11a6dbeb23f09e3e818127bdea0d03b2cc74aa8592a6f8d.dll windows:6 windows x86 arch:x86
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
be run Size: 742.3MB - Virtual size: 1090.0MB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
� H Size: 3.5MB - Virtual size: 3584.0MB
0 Size: 16.0MB - Virtual size: 16B
��� Size: 4KB - Virtual size: 8KB