Static task
static1
Behavioral task
behavioral1
Sample
c99eb16db032f5e7c97d85ecd3db6ac52ff5bd52538132cfc4d95dfbe7a4d474.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c99eb16db032f5e7c97d85ecd3db6ac52ff5bd52538132cfc4d95dfbe7a4d474.exe
Resource
win10v2004-20240802-en
General
-
Target
735cd0e3fc2f7ab41da3a8a32b60b536.zip
-
Size
127KB
-
MD5
8486e3b2cc282d840a89d9ee00afc35c
-
SHA1
ad8a44831c7dc9d1e0e5eaf0269f85be98f4b062
-
SHA256
54cc94a665eaf3cb18c2192dd48496695e464c1c1278fc1015608f9e03f03c3f
-
SHA512
fc237682181a8c0e3a1eecdb94d8c2069adf70bb55b4c2f7c9e1f7fe36655c637c1d7ea3a62b4c0d0557f638b2e003496e07f6d7317e6e2884b1aa6ee96e140c
-
SSDEEP
3072:eadAeXE3rMgN3omC18oQgjo9HgLjFbmSbE/+j4s:hLU35CuoQgjqYErs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/c99eb16db032f5e7c97d85ecd3db6ac52ff5bd52538132cfc4d95dfbe7a4d474
Files
-
735cd0e3fc2f7ab41da3a8a32b60b536.zip.zip
Password: infected
-
c99eb16db032f5e7c97d85ecd3db6ac52ff5bd52538132cfc4d95dfbe7a4d474.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ