Static task
static1
Behavioral task
behavioral1
Sample
1e5495ccb1ffdb824b831566e73e4162fae63d50959f1aa3b3f7edf9962f01e2.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
1e5495ccb1ffdb824b831566e73e4162fae63d50959f1aa3b3f7edf9962f01e2.exe
Resource
win10v2004-20240802-en
General
-
Target
2bb5b651da5978837421bf6b9a88e210.zip
-
Size
127KB
-
MD5
c5aabd274ee378e90fff29011c64a259
-
SHA1
20fa8d7bc701bd7dc5a641ee5b1e966d59209292
-
SHA256
9f8a5be789f2c4b59d1c80828f1787d1e851fd42b92f4e83745b54383e7e002c
-
SHA512
1ff18f0a6a328aaa16773a4ed45d3e9716851780cda0797c8fe6d0308d0cc039f4588367c1ca03c7467d95691cc134b266be64cf580985f01c3146a0f8b7c255
-
SSDEEP
3072:NaCXMR3xAdGGUT3HSbp+7TQ3ShfLmFar64D:Na+gWq3H+o83SfaFaO4D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/1e5495ccb1ffdb824b831566e73e4162fae63d50959f1aa3b3f7edf9962f01e2
Files
-
2bb5b651da5978837421bf6b9a88e210.zip.zip
Password: infected
-
1e5495ccb1ffdb824b831566e73e4162fae63d50959f1aa3b3f7edf9962f01e2.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ