Static task
static1
Behavioral task
behavioral1
Sample
c2ea15132a3f894aba54e3953e4cdb77f50a77afcea386de7f1e9213e124feae.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c2ea15132a3f894aba54e3953e4cdb77f50a77afcea386de7f1e9213e124feae.dll
Resource
win10v2004-20240802-en
General
-
Target
247860ac8a4fb79f36a88379a22ba9f7.zip
-
Size
1.2MB
-
MD5
76c4615946e51547181d4f2d75d4a3d8
-
SHA1
0ad632657d66204af6e9a66b05d6468beb8afdb5
-
SHA256
806ae91bebc14ecfb336db2202f0a2ff244f389beb3962f3a91337275989f99c
-
SHA512
84e04d080e19eaaa866a43074c933b1076e6e0740521249bfbf3dacaae31a3b40177dc9846ca1eb9c157b1959d1b9a1cf43f024017748b9ac98fdc1dfe37fbce
-
SSDEEP
24576:JQgY0Fv+MmHhX9NVXlQuVAi82SWt7Ger16nMwvc9ogRMZHaX5kDD8lx7hdhD3tk:LtKbNhOuOx2rhVr1cMw0MHaX5A8lVhdo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/c2ea15132a3f894aba54e3953e4cdb77f50a77afcea386de7f1e9213e124feae
Files
-
247860ac8a4fb79f36a88379a22ba9f7.zip.zip
Password: infected
-
c2ea15132a3f894aba54e3953e4cdb77f50a77afcea386de7f1e9213e124feae.dll windows:6 windows x86 arch:x86
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
be run Size: 742.3MB - Virtual size: 1090.0MB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
� H Size: 3.5MB - Virtual size: 3584.0MB
0 Size: 16.0MB - Virtual size: 16B
��� Size: 4KB - Virtual size: 8KB