Static task
static1
Behavioral task
behavioral1
Sample
75726f465a077a1165a4e1c4d73167c97c47765cdbcd7b4eb5a7aada89b30b81.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
75726f465a077a1165a4e1c4d73167c97c47765cdbcd7b4eb5a7aada89b30b81.exe
Resource
win10v2004-20240802-en
General
-
Target
c38d1909aa2a99c6e443e16ad9868127.zip
-
Size
127KB
-
MD5
96272fef7cb809fc53644ee43b2e9e5b
-
SHA1
58d81ed3e4fba29e587d35cb3e97bdc4acfa96e5
-
SHA256
25f4a442201056835dd35baf9b6f2b98a4bd3cf9431fb2e2cb2d7fbb0b8ebea6
-
SHA512
10361ccd88a84e19c96a850df557165e6bbb5b39b2db61cbdb1f5e7d9a7adc1260c6d49d96f6a5e5888bb0bdf7549fd17c0a9b0061ac43906f81cb9618c7d81f
-
SSDEEP
1536:8tnwublzFQnuY1zuq6QlxK6XtF4gxp1ymEzQ8pm8T/e1VSKPsVVUacsfpfL03Lbs:8xwubcnuYxZrxKI19O/TGHhWpf433ItJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/75726f465a077a1165a4e1c4d73167c97c47765cdbcd7b4eb5a7aada89b30b81
Files
-
c38d1909aa2a99c6e443e16ad9868127.zip.zip
Password: infected
-
75726f465a077a1165a4e1c4d73167c97c47765cdbcd7b4eb5a7aada89b30b81.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ