Static task
static1
Behavioral task
behavioral1
Sample
b47730dfa62042b31e638b1f6b8d20abbdf8d7dda9e1055a06226de96a6608b3.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b47730dfa62042b31e638b1f6b8d20abbdf8d7dda9e1055a06226de96a6608b3.exe
Resource
win10v2004-20240802-en
General
-
Target
43de738f07861c0713de69b500d28378.zip
-
Size
127KB
-
MD5
6149766fda07c5b35167eedf25be7b10
-
SHA1
02e7ec3191ca1ab119c7aaded5fa3a6f316aec23
-
SHA256
74e6b48d9f0ce056788c649e3a7c22dd2cd287f47a1a020359060ab4fa4ee640
-
SHA512
55ee693f50f70c09fee5f0a4bcaa47eca7700433541cd4f09b38b31abf626787d95c6f2634f1baa261512dc40966c80b5b700a24fbcc6a21fdf15dd11176073c
-
SSDEEP
3072:vhPVv0eSXo+NaZ2g2pjV17rfoM7xclYjDPjd78UphaoyoS:vlVv09QcJpjz7j5TBio/S
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/b47730dfa62042b31e638b1f6b8d20abbdf8d7dda9e1055a06226de96a6608b3
Files
-
43de738f07861c0713de69b500d28378.zip.zip
Password: infected
-
b47730dfa62042b31e638b1f6b8d20abbdf8d7dda9e1055a06226de96a6608b3.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ