Static task
static1
Behavioral task
behavioral1
Sample
6e47dc2f7ce21877e402a9a224f202ed30b390cd62c7716dbce2023eb14a2da8.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6e47dc2f7ce21877e402a9a224f202ed30b390cd62c7716dbce2023eb14a2da8.exe
Resource
win10v2004-20240802-en
General
-
Target
fb9d4f6f8bd7173a7cb2dac5329742c7.zip
-
Size
57KB
-
MD5
998b123f0a615a4ca4c7055b8ff521cf
-
SHA1
7f5787ed0a29a731dd7f6c41e02da40296189bf7
-
SHA256
23b4b04eb229bceed7e5314fe4bfe5d16e0d1772b44c908f6df2a221d8ae09df
-
SHA512
c2519a681943dbf07d997fc6e9832752c59f6a844b1baaa5f939e582b41085b86aedd862ab627b78272b693c26bbb35dcbb2fa7a80483e31ab859a4e2eeb2793
-
SSDEEP
1536:a2wpBiHMGcAtHbd9ZLyAOBZLyF5DWVCJ1E07zZ:aJpBiHxcAt7t3eLW5ndd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/6e47dc2f7ce21877e402a9a224f202ed30b390cd62c7716dbce2023eb14a2da8
Files
-
fb9d4f6f8bd7173a7cb2dac5329742c7.zip.zip
Password: infected
-
6e47dc2f7ce21877e402a9a224f202ed30b390cd62c7716dbce2023eb14a2da8.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE