Static task
static1
Behavioral task
behavioral1
Sample
fc33dc264f9ae49d083e9f2b17ede45e48240804e9dc99006e7d85dc61e0b787.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
fc33dc264f9ae49d083e9f2b17ede45e48240804e9dc99006e7d85dc61e0b787.exe
Resource
win10v2004-20240802-en
General
-
Target
6f7789864ebc98597820cd56a5b2a85b.zip
-
Size
127KB
-
MD5
f3b38a3fdca86e0991d6e321b9619a59
-
SHA1
8f261d96c91c8df8c3fb493e353028e0161786d2
-
SHA256
bafdbbbb0b32dbcd00a9c1f561309c59b9365bed3f9d847a6c7f30288ee5e042
-
SHA512
85b9afbe0124111daee9396e36b43a19146ac3e3a6fd43949c76f805ff2294f9cc065c841b9880e131a9f83ee8c624d8683fa79bd6e011a78b85dc4518979b3a
-
SSDEEP
3072:M0J9S++5BzZuiilxAPRLXiSmRqoM0Y9xFcl+dy1dPIAiyoqNcc:M0PS+0zZMAPRGGUY/yCUdP7Nb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/fc33dc264f9ae49d083e9f2b17ede45e48240804e9dc99006e7d85dc61e0b787
Files
-
6f7789864ebc98597820cd56a5b2a85b.zip.zip
Password: infected
-
fc33dc264f9ae49d083e9f2b17ede45e48240804e9dc99006e7d85dc61e0b787.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ