Static task
static1
Behavioral task
behavioral1
Sample
bc32aa0519a2577bc1457050c10727c186a6a1e082cb5800313c3c7200e8b0d1.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bc32aa0519a2577bc1457050c10727c186a6a1e082cb5800313c3c7200e8b0d1.exe
Resource
win10v2004-20240802-en
General
-
Target
f3e69deb6d59a58e78aeabb495b3b9e8.zip
-
Size
127KB
-
MD5
b982a3a7d4d80555dc9f5c74352d3abe
-
SHA1
eb68721a5e06cbde7cc4a5bc6c021fc8bbffb913
-
SHA256
cefbd830c0ba6023c1e79d8bcc9817b79e0bd92050a1781f3d66d6a5f8feba46
-
SHA512
344ae79c9b96e4e6fd443dfa96bb500db5ac19e6e7e4f9298820c470383b09ba8593d81da07d615c0c3e65889ec517a0a7c847305606ebf5c47ab8a3e1b5cfaa
-
SSDEEP
3072:T8lOv2AISqMqUau4Q39oK/vUFQaJt8jD4dPuCn6q/:Y4vhISqM9fxNl34QaJtS4dmZm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/bc32aa0519a2577bc1457050c10727c186a6a1e082cb5800313c3c7200e8b0d1
Files
-
f3e69deb6d59a58e78aeabb495b3b9e8.zip.zip
Password: infected
-
bc32aa0519a2577bc1457050c10727c186a6a1e082cb5800313c3c7200e8b0d1.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 14.7MB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ