Static task
static1
Behavioral task
behavioral1
Sample
2a3244f2ce5bcb90827388b8a919900b8cf999d1df00ae2340713c67f26424bf.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2a3244f2ce5bcb90827388b8a919900b8cf999d1df00ae2340713c67f26424bf.exe
Resource
win10v2004-20240802-en
General
-
Target
b27786513e4f1ff21dfa4b9d3a2ebe36.zip
-
Size
127KB
-
MD5
f698bf180f11946d617f4ec1c0e6cfe9
-
SHA1
940fb0ce8d826574848143254e0ca951dec40d0f
-
SHA256
54bffd14bf0406f327487cfb2e4e638b2c710b211afd9d6f65ac28b4992086a4
-
SHA512
0b0aff37d9f37b6cfe5ce2e9f954f74900059a57aa3fe478e3869c1faa98cd030ffb08f31357932bbe4b887f578bff3c71e842a9d0bf2e849df64ffd93a59374
-
SSDEEP
3072:+4l5tsWvNDw9+4dchlkQXWziJ93y7OUr+xgENZEAALXu:+m5tsW1Dw9pyx/3BTmENZEAALXu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/2a3244f2ce5bcb90827388b8a919900b8cf999d1df00ae2340713c67f26424bf
Files
-
b27786513e4f1ff21dfa4b9d3a2ebe36.zip.zip
Password: infected
-
2a3244f2ce5bcb90827388b8a919900b8cf999d1df00ae2340713c67f26424bf.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ