Static task
static1
Behavioral task
behavioral1
Sample
d2647fc475358a1906dc23942f241f691a7dd4ab789340001be0617e358c717b.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
d2647fc475358a1906dc23942f241f691a7dd4ab789340001be0617e358c717b.exe
Resource
win10v2004-20240802-en
General
-
Target
8de5732516623bf0f30224383d33ea14.zip
-
Size
252KB
-
MD5
2cd7070623816e69407fcd5a284789f8
-
SHA1
73b416db2d78bfdb3876764ae11f4ac3c5a56c60
-
SHA256
9ce1522c4f8aab07bd35fc81062d7c05006675e100ecf588c0ddcef8c35f1c11
-
SHA512
15d3212fec2de15201f9e5ae96f60465acaa400eb8b606013bfd60d9816d17ca2b4228b585a3e800de3fc80d294ad28558ef6e2d1a36fe2c19e3bd3c578385bd
-
SSDEEP
6144:48PgqMWoFQyEGzeENYLGdgY3rPVKylwV0ev1kh9q0Nznkmo8:46oQAz8L3Y5404R0Nrx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/d2647fc475358a1906dc23942f241f691a7dd4ab789340001be0617e358c717b
Files
-
8de5732516623bf0f30224383d33ea14.zip.zip
Password: infected
-
d2647fc475358a1906dc23942f241f691a7dd4ab789340001be0617e358c717b.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 312KB - Virtual size: 312KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE