Static task
static1
Behavioral task
behavioral1
Sample
39d312c75582d6911a866915643c9fd411ef7386ff2e72321bf13a833370b38a.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
39d312c75582d6911a866915643c9fd411ef7386ff2e72321bf13a833370b38a.exe
Resource
win10v2004-20240802-en
General
-
Target
af63baf2ef35869e4561b4a3b7adda1f.zip
-
Size
5.1MB
-
MD5
6fb17d037383def8cbf125bda7106768
-
SHA1
570c7dcecc67dcfdc34342bc91868e6b70875a10
-
SHA256
4e87d4f71bdca2ac202cff9c40a87b6335fb88da282c7f9cea4e7a620e6d226b
-
SHA512
21fcc6dd4595cee2cb96a0c7c39f47cbef27956c98d30a383e9ad5dd3f7cbd164d7ea08dcb0bc2d2bf3d292b7f9644064c2d1d3b39ecda8b64ef6ef29043f9fa
-
SSDEEP
98304:xGLrT6PMfrGZxM77MaAUzOLNXAGnIcjdnsun68gzAtXNWRh9rJefJJOHfMejvJ:sLzGHeLqiGIGM8PdMvrSYfMMB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/39d312c75582d6911a866915643c9fd411ef7386ff2e72321bf13a833370b38a
Files
-
af63baf2ef35869e4561b4a3b7adda1f.zip.zip
Password: infected
-
39d312c75582d6911a866915643c9fd411ef7386ff2e72321bf13a833370b38a.exe windows:1 windows x86 arch:x86
Password: infected
500ff1538958cc73738bf0c262a1773f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
GetModuleHandleA
user32
MessageBoxA
Sections
.dafixer Size: 541KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dafixer Size: 10KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dafixer Size: - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dafixer Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dafixer Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dafixer Size: 512B - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 122KB - Virtual size: 560KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dafixer Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE