Static task
static1
Behavioral task
behavioral1
Sample
8dedfd011a7b895f1e504957fc594364f08edefc0fa4943f3ab5cf5dec559ff5.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8dedfd011a7b895f1e504957fc594364f08edefc0fa4943f3ab5cf5dec559ff5.exe
Resource
win10v2004-20240802-en
General
-
Target
be372fe1a1a47747e13a276e42a7d359.zip
-
Size
495KB
-
MD5
78416fd9b009f0fb08d199acf743cc2c
-
SHA1
64b70e8234a2231567bdaca528153420a35c2dd1
-
SHA256
25ee130f82bd63d2f12d6d09afbae6644fa5d5508b81d8448ab4736cbd0974cc
-
SHA512
df8756657b13a5b9ab680e8fed4de4c3e1078c145730ea8ca194c0fe56839b3b249b8a57467529c9b72c1fbc53e59b204278d157bc7436ca87497157d645ab59
-
SSDEEP
12288:tWsbFtDOwsmecv4JMCOnIKH1tHg+if7/pMAX:tWcvecQ3OxHnA+iz/DX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/8dedfd011a7b895f1e504957fc594364f08edefc0fa4943f3ab5cf5dec559ff5
Files
-
be372fe1a1a47747e13a276e42a7d359.zip.zip
Password: infected
-
8dedfd011a7b895f1e504957fc594364f08edefc0fa4943f3ab5cf5dec559ff5.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 860KB - Virtual size: 858KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 84KB - Virtual size: 294KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ