Static task
static1
Behavioral task
behavioral1
Sample
ff45b37505f2635e09a7a62699a2119f94bf704d86ea0601dab3470fa7f16e0a.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
ff45b37505f2635e09a7a62699a2119f94bf704d86ea0601dab3470fa7f16e0a.exe
Resource
win10v2004-20240802-en
General
-
Target
6675781d4b0601acfed70ff81cbc09f6.zip
-
Size
127KB
-
MD5
fe55fbadda6e5cb4bb0e8c94fb1d426c
-
SHA1
1d3c09fc8dc0e9d84cc49e86531d64d07a493a76
-
SHA256
6bb74c1716b2b5ceb7669ef6a40a8c3129788c938bc7461e211c3eee7e90ba7a
-
SHA512
b6b942118d076afec9cf8140a63731d3c8e5034526d22af90d9b11bd90cf50b69798dd63960bd263e12d01be6baa5f07675fa16dad9cb3f3f527d00c26d928a2
-
SSDEEP
3072:MuVLEotmUpNVOXTyF9B3GPvYPEly1TEp6s1pQFEYMWlYLYc:vEoBNVUTSsPv7l7fEzdWEc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ff45b37505f2635e09a7a62699a2119f94bf704d86ea0601dab3470fa7f16e0a
Files
-
6675781d4b0601acfed70ff81cbc09f6.zip.zip
Password: infected
-
ff45b37505f2635e09a7a62699a2119f94bf704d86ea0601dab3470fa7f16e0a.exe windows:63748 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ