Static task
static1
Behavioral task
behavioral1
Sample
a350dcc6724fd7579ace7574b709423a7d5706b5580ee65032bb9fc02e2cc7c8.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a350dcc6724fd7579ace7574b709423a7d5706b5580ee65032bb9fc02e2cc7c8.exe
Resource
win10v2004-20240802-en
General
-
Target
c4c937d15a48c1a3555bbc60a418d4e0.zip
-
Size
4KB
-
MD5
7e206e2b8b388f68c8678c3a8b21cbf2
-
SHA1
85e919cd65a3a4792f3866b46e8319c6e60f46af
-
SHA256
9f617c3dca476a3cb180824c38a81e69f7add32e7b92ad5c6eacf48d701c9ac5
-
SHA512
f60c7f1ad926bd0414b7e1d764e9a5ad8bff6e1960cc155ee74d9f10b1169d48dc56b49a16497f7dd62bd923901fe0ca2bd729612cd05f2312f9cacd660381fe
-
SSDEEP
96:e2CpKpeL0bYJ41PA8dtw7DmLboqDafhBg/IREonUMS+v2:e2CZiM2PZdtK6wqDyBg/IREMz2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/a350dcc6724fd7579ace7574b709423a7d5706b5580ee65032bb9fc02e2cc7c8
Files
-
c4c937d15a48c1a3555bbc60a418d4e0.zip.zip
Password: infected
-
a350dcc6724fd7579ace7574b709423a7d5706b5580ee65032bb9fc02e2cc7c8.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ