Static task
static1
Behavioral task
behavioral1
Sample
a65836a44c27fbe6d0a55a89ab3a3f9aa1e2f9ee547435a4569fa8f3e420fd6e.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a65836a44c27fbe6d0a55a89ab3a3f9aa1e2f9ee547435a4569fa8f3e420fd6e.exe
Resource
win10v2004-20240802-en
General
-
Target
25cbd4941f326ce312a8980ecac923e3.zip
-
Size
240KB
-
MD5
0a6e77f9b9606add6552c056aac8529f
-
SHA1
592fe10ad118c26fc44a462e8cdf789fd709455e
-
SHA256
e1abda282e6d91001dac7b1a286189a25d82e967ea26ff8601b4fd2947ad6bb2
-
SHA512
78e2514990ac8c939a928a81c9a5b47a0c2a80377ff5633988d890dd2024afdbf48ee22ac228731f8e48059501144579e9338bf407f643ee3b6cdb407900ba79
-
SSDEEP
6144:e190ra3Ks4p3QORwOh9xwcI++iUil4m9zLrETfN+:e190tpJRr9/AiJB1q1+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/a65836a44c27fbe6d0a55a89ab3a3f9aa1e2f9ee547435a4569fa8f3e420fd6e
Files
-
25cbd4941f326ce312a8980ecac923e3.zip.zip
Password: infected
-
a65836a44c27fbe6d0a55a89ab3a3f9aa1e2f9ee547435a4569fa8f3e420fd6e.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 240KB - Virtual size: 721KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ