Static task
static1
Behavioral task
behavioral1
Sample
f78e13369d0f57554a839d0e973d721468735a498ed634d8de44f923a87ca15e.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f78e13369d0f57554a839d0e973d721468735a498ed634d8de44f923a87ca15e.exe
Resource
win10v2004-20240802-en
General
-
Target
fa5d4e1e02457ac8ba68102b1e597355.zip
-
Size
127KB
-
MD5
36f5589ec36a8c39db0a2565aac23867
-
SHA1
d4cd0a0b181653b01023f26a6fcc65a81318ab69
-
SHA256
575101138e8e660c13ef4ef325bd364dc8c74bc730f397fa5661f2dd91df451f
-
SHA512
43d38d92f52b1ffde28d5ee4341c95604ea057d7c9b7f357a8d9c428ba6091e70d11639d9cb6c8f66edc84521cb46121745cc80d02940163dda796f064994d8e
-
SSDEEP
3072:Ll9zjycO7fZwXzmt5lj3cXArV+y8oZGx/9ytLNP:3znO7fwzMLj3cXNtwztZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/f78e13369d0f57554a839d0e973d721468735a498ed634d8de44f923a87ca15e
Files
-
fa5d4e1e02457ac8ba68102b1e597355.zip.zip
Password: infected
-
f78e13369d0f57554a839d0e973d721468735a498ed634d8de44f923a87ca15e.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ