Static task
static1
Behavioral task
behavioral1
Sample
b899db0b5e9e83681fb774d10f259e16621579f3b0765b5329ea64d4da471edf.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b899db0b5e9e83681fb774d10f259e16621579f3b0765b5329ea64d4da471edf.exe
Resource
win10v2004-20240802-en
General
-
Target
ea5cf1308bb49b7f258c0225892ae11c.zip
-
Size
127KB
-
MD5
c6b13d35c9c8dfaff51a32bf9e1a8844
-
SHA1
3722f37a849daab70e33f3033bd45ae60f2583b6
-
SHA256
58d380e7e0a6516fcc2dd3c719248baa7934984164a94eafafe82a13c160e05d
-
SHA512
fc36aaeb94d1eef8b92b845b29c814738e2cde68a652bc6fff8508804b438442c9ca0a53823fef2480a8b52dd7f305ec64ccfaeba04cb8c443f0d0c5223a9735
-
SSDEEP
3072:ayzIzzFW8hyn/vLbXxex5JnYR3BdwHk0c1Zamo6iiuPdHtMDAD:ardWGyXPBexHo3BdwE0c1ZaxKuFHRD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/b899db0b5e9e83681fb774d10f259e16621579f3b0765b5329ea64d4da471edf
Files
-
ea5cf1308bb49b7f258c0225892ae11c.zip.zip
Password: infected
-
b899db0b5e9e83681fb774d10f259e16621579f3b0765b5329ea64d4da471edf.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ