Static task
static1
Behavioral task
behavioral1
Sample
f8d0851e6df8f05f0f323dc6b8b4cb0e4332ac59a02ea146fc8762cab6c1f41f.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
f8d0851e6df8f05f0f323dc6b8b4cb0e4332ac59a02ea146fc8762cab6c1f41f.exe
Resource
win10v2004-20240802-en
General
-
Target
9a9fdb5593395a277e01409ce02c05ff.zip
-
Size
11KB
-
MD5
049ffb715a8415130b25852c1a1ecee8
-
SHA1
cfb392c16678e86f3b88541fe32de48ff3d884af
-
SHA256
4cffac5a1ce0cbfe9d51dcd7123a001e3430a072be93038b57adf5bb74b0a3f0
-
SHA512
5d5e72fcd17b82628bd8f3af140e2eedf4ea1cdaba1ea3e87d4cda8548b8f0e2c5536341214c91862e5e520a1e72a8f6cfcaebde17514db0f64aff0cb9904a20
-
SSDEEP
192:piizwaMEpKPny0PtIpfZEHyGPo/NJz/xrsIwzeCuWup5dAVRQw/zg5PbND1puNar:/XKPyBAPAXz/xrsIgeCwreVqyzghbNJd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/f8d0851e6df8f05f0f323dc6b8b4cb0e4332ac59a02ea146fc8762cab6c1f41f
Files
-
9a9fdb5593395a277e01409ce02c05ff.zip.zip
Password: infected
-
f8d0851e6df8f05f0f323dc6b8b4cb0e4332ac59a02ea146fc8762cab6c1f41f.exe windows:4 windows x86 arch:x86
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 108KB - Virtual size: 107KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ