Static task
static1
Behavioral task
behavioral1
Sample
ec5955d8788f80054caa29fd1f08966f4b4594dd6bf095649168b11ffb4e0f1d.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ec5955d8788f80054caa29fd1f08966f4b4594dd6bf095649168b11ffb4e0f1d.exe
Resource
win10v2004-20240802-en
General
-
Target
e91b77a4f212be290f067484b8df0c81.zip
-
Size
13KB
-
MD5
18cf6cc798d45e58987f1ca98a067f80
-
SHA1
81b196758b11c95e1892bd69e82ee837b6548d7c
-
SHA256
282854b861636782adf3aa54b932ac95087735001990e789a2f17280a0477b07
-
SHA512
a99ee5e243993c4a24d50f2e71426729a1b1d77bf3f894aec1a0bd635a802c194294dbe7756895de3283602227a83ec16379c1c9a928c948dbf09cfbf9a51dde
-
SSDEEP
384:nlIgNE99TvEChivG7o/Q1OzcmpPBmZh816/Tw:lIgE7cCEOB2lBahAqTw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ec5955d8788f80054caa29fd1f08966f4b4594dd6bf095649168b11ffb4e0f1d
Files
-
e91b77a4f212be290f067484b8df0c81.zip.zip
Password: infected
-
ec5955d8788f80054caa29fd1f08966f4b4594dd6bf095649168b11ffb4e0f1d.exe windows:5 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ