Static task
static1
Behavioral task
behavioral1
Sample
ee1fbf0b8852734ee63e852f6c3ce641688e6217f4a0cf4f4578582e66bf79a9.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ee1fbf0b8852734ee63e852f6c3ce641688e6217f4a0cf4f4578582e66bf79a9.exe
Resource
win10v2004-20240802-en
General
-
Target
74aac2d5d34fd2a4e8b91becff66b01c.zip
-
Size
127KB
-
MD5
cfba00a0575e5f91415c397921e0b6b5
-
SHA1
ac602f2ab5d2cc83e3dab8bd353f4cfffa05b7d8
-
SHA256
6c3fccc1fb86a53e2a4b213b8fd63ae399d3a46fd8592eb1f58f8f75d9d78e38
-
SHA512
ac322a3cae3fe7822d812330e17ed815acfeba83533af9de439779a883d7de2e1f0154a42e35a980c6c75be36a121b2075cf38498e7cb429ba020604ed190eb8
-
SSDEEP
3072:iU1mGD19Bb10OIVdTp5ExHIPL7pzlhcBW6hhkuADiEQPjA:iUrFb10fTsxCfpzluBpVtvA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ee1fbf0b8852734ee63e852f6c3ce641688e6217f4a0cf4f4578582e66bf79a9
Files
-
74aac2d5d34fd2a4e8b91becff66b01c.zip.zip
Password: infected
-
ee1fbf0b8852734ee63e852f6c3ce641688e6217f4a0cf4f4578582e66bf79a9.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ