Static task
static1
Behavioral task
behavioral1
Sample
bc66c1dda3a7ce1170591b1e75a4265257efd2a7e96e58d09ef99edbf2121f94.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
bc66c1dda3a7ce1170591b1e75a4265257efd2a7e96e58d09ef99edbf2121f94.exe
Resource
win10v2004-20240802-en
General
-
Target
ea8d564d70b36e052ea95e022bdcec9c.zip
-
Size
127KB
-
MD5
21f9c6d90abdc4e7895ddf15021ecf4f
-
SHA1
adfddefafc9d97a95403b87ed0d1ad684770bc71
-
SHA256
ebb5adc37c8da27105fc3ba2b233a3b7e9a532e1fa7449d1e8c01f977daa7e43
-
SHA512
fa26703d1a56b5d1dfe2d29fe1995512bce470648b6b0c0b2fd98578a9ecc4c166bfaa0ca727a7f6c7f8c553c0f9c71a6f4dc8c908fe9c1f52e4bd189f61f677
-
SSDEEP
3072:Q3DhOSLzf52Y2JogLto2cZU1MCzfUM+YOm53c:QzhF5j2Jogo251MCDUvYBs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/bc66c1dda3a7ce1170591b1e75a4265257efd2a7e96e58d09ef99edbf2121f94
Files
-
ea8d564d70b36e052ea95e022bdcec9c.zip.zip
Password: infected
-
bc66c1dda3a7ce1170591b1e75a4265257efd2a7e96e58d09ef99edbf2121f94.exe windows:63748 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ