Static task
static1
Behavioral task
behavioral1
Sample
c63fd2777136be815166bf7262e78c42747c1743eae2135d07c5c1fcdd8c8070.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
c63fd2777136be815166bf7262e78c42747c1743eae2135d07c5c1fcdd8c8070.exe
Resource
win10v2004-20240802-en
General
-
Target
89836b0e2493768528d8468c383237a6.zip
-
Size
1.2MB
-
MD5
3113261a82ba3d181f4435aa8b62a775
-
SHA1
c3af88efeede2a22bf760b433b517bfcc555e144
-
SHA256
c5f13d76e8f68172f19885bf8892de376ae44324d174d3bcff2fc0a61dc33af1
-
SHA512
e9eee40070f90c8cf87cf7e09d6ab226507c5638c9367a92a44c86dc635dc00e9e5ec87e789d625fe86ffe4f715b866c4ff0a07607739d76e9f675ea3236af4c
-
SSDEEP
24576:eeSgN+hbyCuQv5AzWcfe7wSODjbmbl5EpHsTdX/:e5hWCnBArqwSC0TdX/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/c63fd2777136be815166bf7262e78c42747c1743eae2135d07c5c1fcdd8c8070
Files
-
89836b0e2493768528d8468c383237a6.zip.zip
Password: infected
-
c63fd2777136be815166bf7262e78c42747c1743eae2135d07c5c1fcdd8c8070.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE