Static task
static1
Behavioral task
behavioral1
Sample
2f97a2b8cadd2069d126a59a1e88c0144302ea1007e39947f93cdff40e725d3c.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2f97a2b8cadd2069d126a59a1e88c0144302ea1007e39947f93cdff40e725d3c.exe
Resource
win10v2004-20240802-en
General
-
Target
5d4d718782293ba349c060b870a9a114.zip
-
Size
128KB
-
MD5
c26b52d31b5cf7b4fe76ae1ca1d8650b
-
SHA1
172f023fd181d11c73cd18329f7785e1b59b866d
-
SHA256
f48ddf1697881a321d5989a49e9cb2c06f0ef1da40fa858264283fbf085697cd
-
SHA512
a327c38fd8321afd2ea49a177cfde42e27157b4585ec8464d9f8accafc01304beff7f1a7b3c669a063f3fbb66ecaa005113c797127d6f06c917934ada9c1a81c
-
SSDEEP
3072:R+OIW/9lIN/TI8selaAkfR+R8bwtAzXHj2V73YPoZA:UW1lS7I89PkfR+R1AzXD1oe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/2f97a2b8cadd2069d126a59a1e88c0144302ea1007e39947f93cdff40e725d3c
Files
-
5d4d718782293ba349c060b870a9a114.zip.zip
Password: infected
-
2f97a2b8cadd2069d126a59a1e88c0144302ea1007e39947f93cdff40e725d3c.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ