Static task
static1
Behavioral task
behavioral1
Sample
da0c8d0bd527c7dc79bb38147295e2837d4c013321044d67665cfd793c4bde82.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
da0c8d0bd527c7dc79bb38147295e2837d4c013321044d67665cfd793c4bde82.exe
Resource
win10v2004-20240802-en
General
-
Target
3782ff07bb6660e0ea6d28ae1af3f0fb.zip
-
Size
127KB
-
MD5
1cbe65106945aaf2aaefaba10485d30e
-
SHA1
9582f2f11b56f3293a47fb4310e9d662c92c50b7
-
SHA256
743209423c949b3ebc9356aa9610eaf976608a110f50635834770a68ecdee6d1
-
SHA512
a4936bcf01617e3ba99f1ee8e73f3b1f84158d7583a5f36109a07f157730ad5cca6957daff2fe90452c43bfd462e7fc125d0acdb773d3535da1ec9f42666f378
-
SSDEEP
3072:z45O15W/waz/NwVgsTd9VbCMqTyywdipkV7tKjCgQexBqUiV:z4Q1Y/B/yVgC3CVww0tYC8xy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/da0c8d0bd527c7dc79bb38147295e2837d4c013321044d67665cfd793c4bde82
Files
-
3782ff07bb6660e0ea6d28ae1af3f0fb.zip.zip
Password: infected
-
da0c8d0bd527c7dc79bb38147295e2837d4c013321044d67665cfd793c4bde82.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ