Static task
static1
Behavioral task
behavioral1
Sample
a40b8fa734df8ea04b3e1d1c51a3945f9d70c4e86f8bda580f9b31c0d6dd4443.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a40b8fa734df8ea04b3e1d1c51a3945f9d70c4e86f8bda580f9b31c0d6dd4443.exe
Resource
win10v2004-20240802-en
General
-
Target
1948c025fb0794af9d68c7159fb588ef.zip
-
Size
171KB
-
MD5
a6bdd866da9ca5d0000b982e7382c23e
-
SHA1
3cea39eb4ec77c9ef75f09ac02cc7df8d3755c20
-
SHA256
ae759847e8256eea21972a5d66cb4c58f26b4fb5cf2d1709ac55b66d8ef0479c
-
SHA512
9ad672a29c0021f5d794c94cc0c4037ed35584bcc96596d2da989e8171e6f8d133a2a6b6af462c51a61fbc3a8d841850ff220139dbc0596cdc399a4c5c7b0278
-
SSDEEP
3072:8KaTqqZE/bO8DXhwmnfS1Qqe7gqnYCWONAsMp9oxwOpeoC+CxgQg:8zE/bOKhwmYQ9OdCAsw6WOpeoCNzg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/a40b8fa734df8ea04b3e1d1c51a3945f9d70c4e86f8bda580f9b31c0d6dd4443
Files
-
1948c025fb0794af9d68c7159fb588ef.zip.zip
Password: infected
-
a40b8fa734df8ea04b3e1d1c51a3945f9d70c4e86f8bda580f9b31c0d6dd4443.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
MEW Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�uۊ�� Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE