Static task
static1
Behavioral task
behavioral1
Sample
d6753208ebf6522bb6a27799765d29ed4ad7cf82281ea0f9360053a6c41bfd4f.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d6753208ebf6522bb6a27799765d29ed4ad7cf82281ea0f9360053a6c41bfd4f.exe
Resource
win10v2004-20240802-en
General
-
Target
d30bb4dfbeb7b9f4f4bf3b3f482be81c.zip
-
Size
127KB
-
MD5
19e3f5b55c7237991a5bcb0d98b506b4
-
SHA1
106e6a0a47d6ee2ceecd4d006c2312b4615d4c78
-
SHA256
f7685d977e95afb28397d1ded9064c69bf0a8a5008d4baca68b0320e0cc3dbe8
-
SHA512
c2b84a907319a44910925de5de5db01ae09ae6843a48625e04f407bf836bf9e1d08239c4d60a50dd44e75e4b5d78d96c35007abd12dc814a2780fc4b663a3439
-
SSDEEP
3072:H3XNInrnfqkGZiMuJT51UpppCtuZ5w2nQLU5:X9ErnfqkGZJQT5a3peuZv6U5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/d6753208ebf6522bb6a27799765d29ed4ad7cf82281ea0f9360053a6c41bfd4f
Files
-
d30bb4dfbeb7b9f4f4bf3b3f482be81c.zip.zip
Password: infected
-
d6753208ebf6522bb6a27799765d29ed4ad7cf82281ea0f9360053a6c41bfd4f.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ