Static task
static1
Behavioral task
behavioral1
Sample
c0d7d2b446847544eac9e84df0d8dd2432993a4ef56b24bef5b5c154705c3add.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c0d7d2b446847544eac9e84df0d8dd2432993a4ef56b24bef5b5c154705c3add.exe
Resource
win10v2004-20240802-en
General
-
Target
bfd42ebe31352269059798d33218f297.zip
-
Size
127KB
-
MD5
d595e61990def544d50f8ebfbfe04c71
-
SHA1
217814bf5b62e1d45af382e71f9d8c9bfdb85e54
-
SHA256
790c15a35a01f5e4fa0a01d974d783b14217465636f8b22e1ebefaf4cb7e8da2
-
SHA512
72fae090dceeed643925589b81278117dee376d0a32fb63bd09118f86652393fb918efb60827bf807561933460849139283c80084fa7eeb1194ccc9fcf5b5a18
-
SSDEEP
3072:oii/jgaEJf5Qy2mMN/w2YE26JteUnx7PPn7e3QwtGZ/UaG:oiSSJ2J57YEHvBPPSBtGZ/UaG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/c0d7d2b446847544eac9e84df0d8dd2432993a4ef56b24bef5b5c154705c3add
Files
-
bfd42ebe31352269059798d33218f297.zip.zip
Password: infected
-
c0d7d2b446847544eac9e84df0d8dd2432993a4ef56b24bef5b5c154705c3add.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ