Static task
static1
Behavioral task
behavioral1
Sample
fdee02563c690b9f0e8dd3a872d26b87d243cae1e98d47a22a6cb5554fa57369.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fdee02563c690b9f0e8dd3a872d26b87d243cae1e98d47a22a6cb5554fa57369.exe
Resource
win10v2004-20240802-en
General
-
Target
581fed4a49813a4de1916025687d9313.zip
-
Size
127KB
-
MD5
5840d4567d5679c3ca3f09c25c25db68
-
SHA1
9d15829317b87c0cb5b7e6e6b1fd8d87ae45ff45
-
SHA256
97b46abbe5c5301021f428b455d29064937f83ca86c10f502b1aa2193f4ee8a3
-
SHA512
0d9e63e43cd8ba64b51275d8305c8535bc08da4681bafbd468969e9682f03e0d952f853dd831c1bee55feaaa525e57c5bec2419dee1a65a91f22c778a94ac317
-
SSDEEP
3072:c9ASCge5tykYsQcMLljkog8LKMfxnGLed1AC2SYRJiCfW:pSCrtSsQ5ljlvZGLedqCnYDiN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/fdee02563c690b9f0e8dd3a872d26b87d243cae1e98d47a22a6cb5554fa57369
Files
-
581fed4a49813a4de1916025687d9313.zip.zip
Password: infected
-
fdee02563c690b9f0e8dd3a872d26b87d243cae1e98d47a22a6cb5554fa57369.exe windows:63748 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ