Static task
static1
Behavioral task
behavioral1
Sample
69fdbdd390e8e7e72cc263b6f6d2708e10f6aa4343c49b711382f5b198c7ecd7.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
69fdbdd390e8e7e72cc263b6f6d2708e10f6aa4343c49b711382f5b198c7ecd7.exe
Resource
win10v2004-20240802-en
General
-
Target
5dd1354fae1efda9b2613ebff12ef075.zip
-
Size
9KB
-
MD5
333c2506bc4f55b7624531c678eea4f1
-
SHA1
0dfd42625b6bfdff3c0ccb79e8ef530697ee7bc3
-
SHA256
3ddaa6d0bd765dcac049d044729097b418d38658b75b273a91ee968aef848492
-
SHA512
4e7d3dd6c9ae1614c08e9bf3d468a08f51915ade724ad2f537a7c43f1a63bfc952f1ad6a21a43ebc0704de0875c9beba7eeb1c982f2600dc29000e76f59f16ca
-
SSDEEP
192:Uun7/37PukbFlMAMgMEapfVQXBfy1VTKCmIzv56:B7zukbUKmQXaTKCmgR6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/69fdbdd390e8e7e72cc263b6f6d2708e10f6aa4343c49b711382f5b198c7ecd7
Files
-
5dd1354fae1efda9b2613ebff12ef075.zip.zip
Password: infected
-
69fdbdd390e8e7e72cc263b6f6d2708e10f6aa4343c49b711382f5b198c7ecd7.exe windows:4 windows x86 arch:x86
Password: infected
802dcac7aab948c19738ba3df9f356d9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
strcmp
memmove
memcpy
strncpy
strlen
kernel32
GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
CloseHandle
InitializeCriticalSection
GetModuleFileNameA
HeapAlloc
TlsAlloc
TlsSetValue
GetCurrentThreadId
GetTickCount
TlsGetValue
CopyFileA
WriteFile
HeapFree
CreateFileA
SetFilePointer
GetFileSize
ReadFile
EnterCriticalSection
HeapReAlloc
LeaveCriticalSection
TlsFree
GetLastError
SetLastError
WaitForMultipleObjects
GetCurrentProcess
GetCurrentThread
DuplicateHandle
CreateSemaphoreA
CreateThread
ReleaseSemaphore
Sections
.code Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 5B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 700B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ