Static task
static1
Behavioral task
behavioral1
Sample
d3f207892eeaa1d4969fdc17a0bf02c674eb7d6ba90d79dcae560344c4c877e8.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
d3f207892eeaa1d4969fdc17a0bf02c674eb7d6ba90d79dcae560344c4c877e8.exe
Resource
win10v2004-20240802-en
General
-
Target
8f05529bd343c7bdf51e31f8a6f85e6d.zip
-
Size
5KB
-
MD5
3deba23cc4df45c12e4de468cd2227a5
-
SHA1
c14e7a90fc2b1acb4a0057dc4d759a29bb527a7c
-
SHA256
f45e3911611a086da5661d59b7e9e3b7909b267b74cab43c3998857a550ae7d5
-
SHA512
674a34540405d4057bb6def278f674b8bed84a35bff41e256dd167231a8685b6183a10e7286fcdc934b71316e1a9074b1a596a80e7ec6aa3142907604da57354
-
SSDEEP
96:xl3y0s0SZFmwCSzUbH0p/VhI/w2uQPI2out2CdW7RVR8qecfYbrmlS:3RS3mNFH0p/cJuQPr4CAVaqsbroS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/d3f207892eeaa1d4969fdc17a0bf02c674eb7d6ba90d79dcae560344c4c877e8
Files
-
8f05529bd343c7bdf51e31f8a6f85e6d.zip.zip
Password: infected
-
d3f207892eeaa1d4969fdc17a0bf02c674eb7d6ba90d79dcae560344c4c877e8.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ