Static task
static1
Behavioral task
behavioral1
Sample
48afdb4344d23bbfd7d4eaa6b6fc07ea191cc25cc8fd0e484a3a862166198558.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
48afdb4344d23bbfd7d4eaa6b6fc07ea191cc25cc8fd0e484a3a862166198558.exe
Resource
win10v2004-20240802-en
General
-
Target
c754f8eed4ede849853789e18cba9a12.zip
-
Size
131KB
-
MD5
f7d785cf236d837e989335c92817e9ec
-
SHA1
849d9e871e2276df10ab778b94178e29f9f10007
-
SHA256
7f5f12140710521d193f2d7f8bcd4fb62a3949815dcb18bdca82f7ab649944a2
-
SHA512
e808728236c316571d572b56a82dc5230495b1ff8adad4cde6d99f53558403694a6d020f6f3ce69274b19c19f6f8e54db3c1d60ca03627ae1ff002328d71d29a
-
SSDEEP
3072:ml0ODy7OcTWE9k0R8+9Si8mlNZIk7sfIof2Z7YI/rNAThjdAG:mOOXsfO+0ifskWI1Z7RJwjh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/48afdb4344d23bbfd7d4eaa6b6fc07ea191cc25cc8fd0e484a3a862166198558
Files
-
c754f8eed4ede849853789e18cba9a12.zip.zip
Password: infected
-
48afdb4344d23bbfd7d4eaa6b6fc07ea191cc25cc8fd0e484a3a862166198558.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 192KB - Virtual size: 191KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE