Static task
static1
Behavioral task
behavioral1
Sample
c234fec6829e93fc69b390373b9d7bcea9ed5772f3674b842a4e943c3edbf320.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c234fec6829e93fc69b390373b9d7bcea9ed5772f3674b842a4e943c3edbf320.exe
Resource
win10v2004-20240802-en
General
-
Target
7ad230c26830e20381757f41bc4b70ac.zip
-
Size
242KB
-
MD5
8789503334c52d6238ed623a3fdadf3e
-
SHA1
8a0517a66a3c25c1ea6e42f87113de17e841c112
-
SHA256
338a21930611f875e0e6f7875c83502567a1943f77275a8289394f871d69d99a
-
SHA512
995ccf6962252d217f48e5f6abcf011eda996b57c3be0cee3ed0e5b8878e2dea3f65081230e3d0a938658104277048cca733f46ab980f57e7994668f0c1c0177
-
SSDEEP
6144:O5vuH2ZILC54fYmn7aupAb9ClsCmrMa2RGQnxZd6Mp:O5vuH2Zh54gmnRpAbzrEQ8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/c234fec6829e93fc69b390373b9d7bcea9ed5772f3674b842a4e943c3edbf320
Files
-
7ad230c26830e20381757f41bc4b70ac.zip.zip
Password: infected
-
c234fec6829e93fc69b390373b9d7bcea9ed5772f3674b842a4e943c3edbf320.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
^W^(M Size: 215KB - Virtual size: 214KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ