Static task
static1
Behavioral task
behavioral1
Sample
919d2dffa08f3e47a4406322f0bc8cf39da072ac4ff456d491d5c56b4743bef2.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
919d2dffa08f3e47a4406322f0bc8cf39da072ac4ff456d491d5c56b4743bef2.exe
Resource
win10v2004-20240802-en
General
-
Target
d85abf9adc69e096a8e3120dd826f6c7.zip
-
Size
127KB
-
MD5
35ed546bf3a6fe39738fe8b1b9d022ed
-
SHA1
dfb85c9c077615d57b1b37d155db7a94ae4cb008
-
SHA256
f3ca4aa40e4758b9b8b7f5ed72de89088dbb57693f0e495d421e0ac8b6e8c42f
-
SHA512
a0b08508af9b4f0d1c2096d7ecb97271d8f8b4f35ff70d3cb2d9c22945f0e5bc4e5f47b9f7d6c1e9f4c374957d45b88ee02a3680e1d5213258c3fd22608e632a
-
SSDEEP
3072:eTikM+U1Sf2BNj/tiwlULIUGBKStAi78lveZq2btk:eTiVSfINZ1UM//CU4veowa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/919d2dffa08f3e47a4406322f0bc8cf39da072ac4ff456d491d5c56b4743bef2
Files
-
d85abf9adc69e096a8e3120dd826f6c7.zip.zip
Password: infected
-
919d2dffa08f3e47a4406322f0bc8cf39da072ac4ff456d491d5c56b4743bef2.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ