Static task
static1
Behavioral task
behavioral1
Sample
04a905d50c5ead867f778e22d76beb9b1e7e78aea502f7d22e2fa485e000ade9.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
04a905d50c5ead867f778e22d76beb9b1e7e78aea502f7d22e2fa485e000ade9.exe
Resource
win10v2004-20240802-en
General
-
Target
7257e8a5f833ff4e27ac2e5138f41340.zip
-
Size
128KB
-
MD5
4cf55cd637840f32a5ab1aca5f4f7c91
-
SHA1
75ce5c85ddb7097fa64614b8635fd1959b4cdddb
-
SHA256
565ff2bd04ca5b17616ad7c2612c7978b2ddfec3d597348856974fccb4eaaf1f
-
SHA512
1814d4875d092a70b1e3a3e80ee33f90e5755b3b23eac3abe4a45f1149f6d7fc4c8e2b0bbe0762a874625385f23374d64fc810e567cd0b0fd9aa5a757cea5e44
-
SSDEEP
3072:LUwgBUSbA/6LXQk7vQzNaN7P6jARtnQVe7uVktBIc7dlM8:WUS+k7QzNE7y0R0+vM8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/04a905d50c5ead867f778e22d76beb9b1e7e78aea502f7d22e2fa485e000ade9
Files
-
7257e8a5f833ff4e27ac2e5138f41340.zip.zip
Password: infected
-
04a905d50c5ead867f778e22d76beb9b1e7e78aea502f7d22e2fa485e000ade9.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ