Static task
static1
Behavioral task
behavioral1
Sample
1b92b7ad4fe184a81791db6124e312ec1a6b6d24b5212e3e7455c687bf08f172.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
1b92b7ad4fe184a81791db6124e312ec1a6b6d24b5212e3e7455c687bf08f172.exe
Resource
win10v2004-20240802-en
General
-
Target
df056baa52e00b2485c5cc7b8de2ddf3.zip
-
Size
127KB
-
MD5
e4b09b92f340959a712f3112a896d63e
-
SHA1
dceb0e4d7c0c5b8ba4dff7f84feea58d61e3dafa
-
SHA256
275c24b6c6bb574d03add2ef9905f262a16c0e261d72893b4f0d83782e1be873
-
SHA512
0b95c8d2ab46cebebbe15409715ed8d7abad98c7944458063f9ed2889b4b5141eb4a7ef4942d2b8edac182f8387823095851dd09e5abbbbcdd20ea01a10d3796
-
SSDEEP
3072:Az+bu3TXwvWdlQFQ4MJrNjfbOED8LaZd7Paw1Or6lPIW:2+Iw9FQ4oNh4atOr+PIW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/1b92b7ad4fe184a81791db6124e312ec1a6b6d24b5212e3e7455c687bf08f172
Files
-
df056baa52e00b2485c5cc7b8de2ddf3.zip.zip
Password: infected
-
1b92b7ad4fe184a81791db6124e312ec1a6b6d24b5212e3e7455c687bf08f172.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ