Static task
static1
Behavioral task
behavioral1
Sample
a6f7a6e87bacfb38f63af467530d6e0d1ff2a4a4ed9a7a32063920a67b0057d0.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a6f7a6e87bacfb38f63af467530d6e0d1ff2a4a4ed9a7a32063920a67b0057d0.exe
Resource
win10v2004-20240802-en
General
-
Target
e8e50f8e8c3f7e7ec8a40eba7414b7ab.zip
-
Size
141KB
-
MD5
4053d12caf8a01ceda7d8fe00f8c3d8d
-
SHA1
8cb120e7dcf089cb6454ed7bb1e7c5c330c3e97c
-
SHA256
3d5d775ae8524bdfe810fc41b44f3d40a89ee32a06985c38eeb2e4f35670c5b6
-
SHA512
8797b8a30182dc26be9af1a589c0171452c901de9384177004947d362b9ef776f5321a4e2e59f140cb6a669e45666186199fbc1e07b76c056b5f816124845e15
-
SSDEEP
3072:xHdeQIPunXoNNpp9BOqDnjkd0AWC+9GICul5DJWdqtF4/Ef1Sb:x9eQhXoNPp9BVfkiAWC+9GI971Wjstg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/a6f7a6e87bacfb38f63af467530d6e0d1ff2a4a4ed9a7a32063920a67b0057d0
Files
-
e8e50f8e8c3f7e7ec8a40eba7414b7ab.zip.zip
Password: infected
-
a6f7a6e87bacfb38f63af467530d6e0d1ff2a4a4ed9a7a32063920a67b0057d0.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 203KB - Virtual size: 203KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE