Static task
static1
Behavioral task
behavioral1
Sample
adfcfb612208cbdb62c448ec6a9ab3269a2ab9068e516f83f20b3c3834a5d5f7.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
adfcfb612208cbdb62c448ec6a9ab3269a2ab9068e516f83f20b3c3834a5d5f7.exe
Resource
win10-20240404-en
Behavioral task
behavioral3
Sample
adfcfb612208cbdb62c448ec6a9ab3269a2ab9068e516f83f20b3c3834a5d5f7.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral4
Sample
adfcfb612208cbdb62c448ec6a9ab3269a2ab9068e516f83f20b3c3834a5d5f7.exe
Resource
win11-20240802-en
General
-
Target
adfcfb612208cbdb62c448ec6a9ab3269a2ab9068e516f83f20b3c3834a5d5f7.zip
-
Size
218KB
-
MD5
4b767b85c6813c4fec5e69f8ba2e0c3d
-
SHA1
fd98527355094b6b679343f529443a5732ecf4c8
-
SHA256
65f50556a446c39ac123efdc476459b53aaf05f9283760db3a7ebcfcc67feb41
-
SHA512
66956a2c8ff1dd099b06eff5a2f6a34415f63af07a84a9fdf7d8282c06121e3f05e33b530324030c5f19d09d7aa278ca53a55d4fe45eb4c139542f81668d5672
-
SSDEEP
3072:0R8g4RvC2tWlf1E7738p4chcOL6Gy79as5diLlExDq/LTRm4j0qzejv/c5MiuFY:0R14RHtGf1c3OPeE67xrDn345M/Y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/adfcfb612208cbdb62c448ec6a9ab3269a2ab9068e516f83f20b3c3834a5d5f7
Files
-
adfcfb612208cbdb62c448ec6a9ab3269a2ab9068e516f83f20b3c3834a5d5f7.zip.zip
Password: infected
-
adfcfb612208cbdb62c448ec6a9ab3269a2ab9068e516f83f20b3c3834a5d5f7.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 310KB - Virtual size: 310KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ