Static task
static1
Behavioral task
behavioral1
Sample
317ff54b2861c6793da338422dce2c4cf2c59a56bc8ae1c577bd53edc4e7180c.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
317ff54b2861c6793da338422dce2c4cf2c59a56bc8ae1c577bd53edc4e7180c.exe
Resource
win10v2004-20240802-en
General
-
Target
e7d1f01946468531c69bb57eb112d833.zip
-
Size
127KB
-
MD5
4e2a6c57757e04764786b21596b5d30f
-
SHA1
b55e7e537645ac642d5053b0e111146a54176565
-
SHA256
104a896562f2564a5937bd8ad3fae546a2614daa3d8988897167b57bb4f026f0
-
SHA512
7133fed2daedeaf3f16ffa6b7fe0294fc7961a30db10d0f828815fef52dfec19f8037ee62ec86e1acde33efcd2c101ebac2c7c0be6e092f5f3a379daa805afe8
-
SSDEEP
3072:kmbMSxHb6VXCT9HAz5A6rfTU4UBCCjGIIkZZiUTW28F063wo:klSFb6V6AzaMfTNUBCUZlW2qd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/317ff54b2861c6793da338422dce2c4cf2c59a56bc8ae1c577bd53edc4e7180c
Files
-
e7d1f01946468531c69bb57eb112d833.zip.zip
Password: infected
-
317ff54b2861c6793da338422dce2c4cf2c59a56bc8ae1c577bd53edc4e7180c.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ