Static task
static1
Behavioral task
behavioral1
Sample
191bbce15bb311d9986067b8ad7a7532bfe9e18cfc3bee0200d8a73c3e7ea551.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
191bbce15bb311d9986067b8ad7a7532bfe9e18cfc3bee0200d8a73c3e7ea551.exe
Resource
win10v2004-20240802-en
General
-
Target
ccdd82ad62084fe30ca6158753e44b4d.zip
-
Size
127KB
-
MD5
680dcd7f3e37f7ede8b2a741979bee1d
-
SHA1
0f398b15013d757f80fab54d6655fe965b2ba39f
-
SHA256
15e83a556f8408976af5bd5cd1eeab8f0ce2624fc77fc2ffbcecd87ba6ad0035
-
SHA512
8709a922dabb6b19428db41b5069619a1db422f04c1628724935b20ebdaf9408950b17cc876400ab3256a5de23f262040fd79807a07a26684d4b9569b99b888f
-
SSDEEP
3072:qnA5ZJWeohd864Ik03a1Ix1wzIg0nDPBAnEXCiqX5rBoQXORGXfa:V5Z4hhey3auAzIXDpOF5rqQXORGXy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/191bbce15bb311d9986067b8ad7a7532bfe9e18cfc3bee0200d8a73c3e7ea551
Files
-
ccdd82ad62084fe30ca6158753e44b4d.zip.zip
Password: infected
-
191bbce15bb311d9986067b8ad7a7532bfe9e18cfc3bee0200d8a73c3e7ea551.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ