Static task
static1
Behavioral task
behavioral1
Sample
fb241c17148b2f60553caa6c7dfe803a5e78b8dd80d3b82eb74c0120bfe084e1.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
fb241c17148b2f60553caa6c7dfe803a5e78b8dd80d3b82eb74c0120bfe084e1.exe
Resource
win10v2004-20240802-en
General
-
Target
7df6b3fbaaecb77c55f77995861359ae.zip
-
Size
4KB
-
MD5
abf66ab40390a4e22d39d6cdb657b54e
-
SHA1
1be5fa3ece0f526f4b2569bedff9543d1852149e
-
SHA256
a119b10953da0480559e8cc78ffdafb4b65f78b3809140fd5ece0d0aa5d761f4
-
SHA512
809d167979403706d9d0928a37a6374044942dbef4d737134aa6d91080e0cbda79487972dd3c9ed9198eb1db4678c40b439fd38032cd9d30275c11b1f5a8e7df
-
SSDEEP
96:H708OKzOj37Qgt82J5QO2nnBb2ybXisFEXkl2fyLejZn:b0DKzM38gJJ5+nBXbS7UlAyLejZn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/fb241c17148b2f60553caa6c7dfe803a5e78b8dd80d3b82eb74c0120bfe084e1
Files
-
7df6b3fbaaecb77c55f77995861359ae.zip.zip
Password: infected
-
fb241c17148b2f60553caa6c7dfe803a5e78b8dd80d3b82eb74c0120bfe084e1.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ