Static task
static1
Behavioral task
behavioral1
Sample
5d82735a06b00e9bc6e0955fcf3273dbebe72574a661c97b14238345fc6ecbd3.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5d82735a06b00e9bc6e0955fcf3273dbebe72574a661c97b14238345fc6ecbd3.exe
Resource
win10v2004-20240802-en
General
-
Target
d6d968047ca177cb78dc0682ded1de69.zip
-
Size
127KB
-
MD5
c5112d687eef5df8be8f5a4acd1e3dbd
-
SHA1
759e7887a5c3934f3e4f0c0b194cf501490b2f2b
-
SHA256
7863a2258943f8cb4ecfc1f8d8a8424bf579d6a6540b748be83b28b41e589d63
-
SHA512
711957d6afac9a78208dcd631c7ae9c281292344bf64955360a11486ea201e77e9e44bc7f7625726d335be56136932cf7799af80a4ae57c86eb21ba3827370ab
-
SSDEEP
1536:z4mYC2plam++rJ28rkDwyNPbZ7fMY5qwv9eE8kmsoj2nnQEw0dCGfZO8auY5w+sV:Jf/OrkpZLMWqwl5msMZ0Jaa1ywkuZag5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/5d82735a06b00e9bc6e0955fcf3273dbebe72574a661c97b14238345fc6ecbd3
Files
-
d6d968047ca177cb78dc0682ded1de69.zip.zip
Password: infected
-
5d82735a06b00e9bc6e0955fcf3273dbebe72574a661c97b14238345fc6ecbd3.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ