Static task
static1
Behavioral task
behavioral1
Sample
f122e3f96c537e7157615597199ffb05519a6cd446a564a5808565d42cf3b0a1.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
f122e3f96c537e7157615597199ffb05519a6cd446a564a5808565d42cf3b0a1.exe
Resource
win10v2004-20240802-en
General
-
Target
1d49769cad785bc593f8b16c970c4151.zip
-
Size
127KB
-
MD5
4ba8d00bea6bc532e17f5478d9333d36
-
SHA1
8a1c660673f2dd4f5b2451abe17c57b27351bd83
-
SHA256
df037517d425cd7e4dba84f511283c22d9bfb3aad3289b3247942065ace6b47c
-
SHA512
39f955fcf417ba2e981d48dc646cfb6be1604796776bec9f02c6e0eff9e4d599c45873757ee2464001fe118b24b48a4676b3fe8acdb32af988c6411c167c7b34
-
SSDEEP
3072:qZ7bsFhaWB+Ew3DYZNy3aLcanTOSzzIfBlqBd3l+Spm1ic:qZ7bsvBf68NdL9TlzzMsn3l+Otc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/f122e3f96c537e7157615597199ffb05519a6cd446a564a5808565d42cf3b0a1
Files
-
1d49769cad785bc593f8b16c970c4151.zip.zip
Password: infected
-
f122e3f96c537e7157615597199ffb05519a6cd446a564a5808565d42cf3b0a1.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ