Static task
static1
Behavioral task
behavioral1
Sample
db4a6103f0ca4e07b92b370c8f6108a5b804fd04e7dfc7173ebd9c87aae4cd06.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
db4a6103f0ca4e07b92b370c8f6108a5b804fd04e7dfc7173ebd9c87aae4cd06.exe
Resource
win10v2004-20240802-en
General
-
Target
679f9c4477fd255af1c71d5b22ef72f2.zip
-
Size
127KB
-
MD5
59662b68f3d921d57d31e8d7e35100a4
-
SHA1
cd43f34613fffab40726a7bb8e66cd45d3f40973
-
SHA256
92b25b7711101c9f1436bbaf6e04f62c12ba038377bfb2c415333722ed1dcfa2
-
SHA512
91d32cc870673001113ba7083f10abaab5bf5c7549081ffe8958af57f1a6f3f07e4375e4877829d9b41ba8bc20c566753404fd6fa4af741ee6311fc1ec58034e
-
SSDEEP
3072:RXDDcBcAK5s5360WXp1SR1GlnSRvvDtCqK8S9AyJw83:RXfYX1gVZgfGQbtCZ85yS83
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/db4a6103f0ca4e07b92b370c8f6108a5b804fd04e7dfc7173ebd9c87aae4cd06
Files
-
679f9c4477fd255af1c71d5b22ef72f2.zip.zip
Password: infected
-
db4a6103f0ca4e07b92b370c8f6108a5b804fd04e7dfc7173ebd9c87aae4cd06.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ