Static task
static1
Behavioral task
behavioral1
Sample
21b984eb8845d48684e0f47f59f1954d06d660ad947e39e0ffb2d6a89be402e1.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
21b984eb8845d48684e0f47f59f1954d06d660ad947e39e0ffb2d6a89be402e1.exe
Resource
win10v2004-20240802-en
General
-
Target
350500ad6b8fc8ab1a5d6a96700db017.zip
-
Size
127KB
-
MD5
35bef2fd2d37f0e0d7b1bebafbe156f4
-
SHA1
42bb8d69bc14b786349ed3f1038f665bf01619b8
-
SHA256
68ab11a9bd48714756e8aae5c664c3de9925d8532b5a5124733d0eb246da2a06
-
SHA512
00894fc146edb2e346076843cd8a2dcd4a40753d5df71df6d7ef4685d1836f6468d899846a9a78ca001c12f846c5706682b0bbd849f56302adeadcc6b5b91e4e
-
SSDEEP
3072:qoa9JIPdKja+QUcltJHQXbuYHXN22Gqz037d4v7oSaRuegTkHMo:/0JIEPNcltJwXbu8wp17+v7pCKTkso
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/21b984eb8845d48684e0f47f59f1954d06d660ad947e39e0ffb2d6a89be402e1
Files
-
350500ad6b8fc8ab1a5d6a96700db017.zip.zip
Password: infected
-
21b984eb8845d48684e0f47f59f1954d06d660ad947e39e0ffb2d6a89be402e1.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ