Static task
static1
Behavioral task
behavioral1
Sample
1a72fcf0697f519234b1d5c95d35cb5b9fe39cc4e526dd315facf70209182c09.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
1a72fcf0697f519234b1d5c95d35cb5b9fe39cc4e526dd315facf70209182c09.exe
Resource
win10v2004-20240802-en
General
-
Target
d4477410dde155a3ca27e7ed34b5122b.zip
-
Size
83KB
-
MD5
e09b8bee4c7edc590cf10548dcd7e74b
-
SHA1
a689e8fe8696fd5e9e0a370ab268f239917a31b6
-
SHA256
dfe6fec331fdb8f554271aef674c5a5d6e44710d2e178036d0a56ef85cea9e1c
-
SHA512
b1acbe2be35c1206771ca8e6bb5573c7240491772033d2d51bcbefdf82b7eda801e8269a5e63e5b959fab6c6dee2592471caf5e7c65ddf8a29155642bd8de13d
-
SSDEEP
1536:p9jir5x52Rwv49hT0OXMKB6HWrHJ9XW8C0jCQQbxo7tykPwQ9A9AouMmEYnesZoN:jjir5xQRwwvmKB13XWV0jPMxo7/wQ9A3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/1a72fcf0697f519234b1d5c95d35cb5b9fe39cc4e526dd315facf70209182c09
Files
-
d4477410dde155a3ca27e7ed34b5122b.zip.zip
Password: infected
-
1a72fcf0697f519234b1d5c95d35cb5b9fe39cc4e526dd315facf70209182c09.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 188KB - Virtual size: 185KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ