Static task
static1
Behavioral task
behavioral1
Sample
80964d0e33b2df03fa1ad57c535e38bf3dda12a88bcadac47fd7a52fe4fd5ecc.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
80964d0e33b2df03fa1ad57c535e38bf3dda12a88bcadac47fd7a52fe4fd5ecc.exe
Resource
win10v2004-20240802-en
General
-
Target
2edcd8593ad307504f92d3a86cb412c7.zip
-
Size
397KB
-
MD5
90d4e19a1e3596772c1ed3f87695d481
-
SHA1
466c15eafd4c944e0929745904843a6a7f73cabf
-
SHA256
0602199fcbe35dad6ca30ba4b3a4aa1ca4ab5a85b1b333ea0928370becf18bb8
-
SHA512
65230fab531b1ec08d6f7e8e99d2ebbb7352ee1ae3ec6247436486f89b1ddc09c9de2b98e1108579841fdf5affddc892a62bb233e08e04ecd5df2588f081ec98
-
SSDEEP
6144:BH+UMhnZe4jLiuTbi2vOE50ujItBuqtICT/OpFoPdeCh9vVb3Fs1Maw:InhZNjLdr0ujYB1LT28Q0Ne1Rw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/80964d0e33b2df03fa1ad57c535e38bf3dda12a88bcadac47fd7a52fe4fd5ecc
Files
-
2edcd8593ad307504f92d3a86cb412c7.zip.zip
Password: infected
-
80964d0e33b2df03fa1ad57c535e38bf3dda12a88bcadac47fd7a52fe4fd5ecc.exe windows:5 windows x86 arch:x86
Password: infected
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 361KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE