Static task
static1
Behavioral task
behavioral1
Sample
d5b197f68f4799ba5ce53a7d4d0a13820487b4de39bd74be8ef672100c9d5ed3.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d5b197f68f4799ba5ce53a7d4d0a13820487b4de39bd74be8ef672100c9d5ed3.exe
Resource
win10v2004-20240802-en
General
-
Target
fe9bc5bc7dcda83d13f16540bdb25478.zip
-
Size
127KB
-
MD5
c9355c15325ffc7aacd59d3a20c2b591
-
SHA1
a2b23d89a452f1f7bbc0ad8571f57fd03bb91069
-
SHA256
c75e7c7d49502724d49867ae443e9fcba3d568134ca0da90e40a8ce270b7daee
-
SHA512
909ff58bfc2efc00cd7a939b1e2553c9a3482683781ff7cd047e2d5f0d8a39586d1983b31cd96f5e87ba4dec93932fcdfa36ee1a7fea3d8229e1b871235dea8e
-
SSDEEP
3072:98kul30ym14v1Q2j7x51CM/cF7WXfv9UMGxsJXrOrcF:luaEQ2j7x5Z/WWXfOMGxKrOK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/d5b197f68f4799ba5ce53a7d4d0a13820487b4de39bd74be8ef672100c9d5ed3
Files
-
fe9bc5bc7dcda83d13f16540bdb25478.zip.zip
Password: infected
-
d5b197f68f4799ba5ce53a7d4d0a13820487b4de39bd74be8ef672100c9d5ed3.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ