Static task
static1
Behavioral task
behavioral1
Sample
828c64676adf0ee63fa7d6bae210815a739f9da2c8d06885bb2b2adbc9c480d6.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
828c64676adf0ee63fa7d6bae210815a739f9da2c8d06885bb2b2adbc9c480d6.exe
Resource
win10v2004-20240802-en
General
-
Target
59dced899cd2ad7cd9325b1b5bb8d7ab.zip
-
Size
3KB
-
MD5
482f8d9b7d9737cd338d7b33f7af9225
-
SHA1
95ab642752ba53ede3dc8e4676314da268ed5f70
-
SHA256
15de64603f430f10ed0578a9a94c015129cd0fcc99ed56b4fd32b65a1e09cc8f
-
SHA512
27a418a0b1a9c8bdb25b9bad086ac9737ce77a9dd76bbfc0eac8b68dca04f74a5c1a0eeaed59cf6214515554ee7efea818c559dffff6df96cd5991f455381e5f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/828c64676adf0ee63fa7d6bae210815a739f9da2c8d06885bb2b2adbc9c480d6
Files
-
59dced899cd2ad7cd9325b1b5bb8d7ab.zip.zip
Password: infected
-
828c64676adf0ee63fa7d6bae210815a739f9da2c8d06885bb2b2adbc9c480d6.exe windows:4 windows x86 arch:x86
Password: infected
a96d166ab17e011e8049d87211158ae5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
Sections
.xjs Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE