Static task
static1
Behavioral task
behavioral1
Sample
164f5d77e96208abd1a54db7d76297e5c219109f2502a9f3e1f15d46dfb2b157.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
164f5d77e96208abd1a54db7d76297e5c219109f2502a9f3e1f15d46dfb2b157.exe
Resource
win10v2004-20240802-en
General
-
Target
5feb559ece12fa1508873bf531112884.zip
-
Size
83KB
-
MD5
6fe8e44e4411404dc0b86d80ef292bff
-
SHA1
d6d51071483dbc8c2e3f3f83565c5c29de39c2db
-
SHA256
7934fec97cf87b272a132b5540d73a10ddaac7f8fe65ae0f606eabd9cf1d9c6d
-
SHA512
eea48fa6c6041bd1595378185a8873d308789fbdd59936deb9f95be8646a927f1267c50fb9c50ae83bb21342030220b897ec47b58db0e9229b350cee74d9d5ff
-
SSDEEP
1536:+EdC/qhGOpkJLU4XXl9EN5EvfpZn8unlXfs1cN7m6ggTZb/ds5:tCyhGOG7XcqxlXfs1ogUbls5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/164f5d77e96208abd1a54db7d76297e5c219109f2502a9f3e1f15d46dfb2b157
Files
-
5feb559ece12fa1508873bf531112884.zip.zip
Password: infected
-
164f5d77e96208abd1a54db7d76297e5c219109f2502a9f3e1f15d46dfb2b157.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 188KB - Virtual size: 185KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ