Static task
static1
Behavioral task
behavioral1
Sample
0b354e38decdb92f7168b56030ecd9ebfcca2abbfe3c67e5d1ab504db20d2cb9.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
0b354e38decdb92f7168b56030ecd9ebfcca2abbfe3c67e5d1ab504db20d2cb9.exe
Resource
win10v2004-20240802-en
General
-
Target
0bd97af3b578495a7fb8119d6a3f99d6.zip
-
Size
127KB
-
MD5
9d64fd8aff076e111db6292edf3fa941
-
SHA1
968df17336470c09a477c05886eb5db975faa2fa
-
SHA256
8a47f522f559fa3f5c16e0ac1e9b5c908fb14ad9c06898866b4c47147ed71c40
-
SHA512
1ee1e936c4c71d21a863d754c27285b63ea103c9576f3e79856ecc90da667b8963533dc4d9ffab6c540749b69f43ad4c3e51cf96b39fef5a1629aab77e3ca5cf
-
SSDEEP
3072:rQXRR10G8jC37Yh2X1sFJ+h9G4200TcHUZB9wZ9X1MG+6x:UXRUx+XO49G4dtH8B9+fx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/0b354e38decdb92f7168b56030ecd9ebfcca2abbfe3c67e5d1ab504db20d2cb9
Files
-
0bd97af3b578495a7fb8119d6a3f99d6.zip.zip
Password: infected
-
0b354e38decdb92f7168b56030ecd9ebfcca2abbfe3c67e5d1ab504db20d2cb9.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ