Static task
static1
Behavioral task
behavioral1
Sample
518cd1cff88e192996b39e1a10bdd91af6f74c6b6b54720e23ef6353d04eb857.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
518cd1cff88e192996b39e1a10bdd91af6f74c6b6b54720e23ef6353d04eb857.exe
Resource
win10v2004-20240802-en
General
-
Target
4fc45145a210cd1af1a9e79a05e459cb.zip
-
Size
127KB
-
MD5
0c39e71fe104bf7454f6ab6aaa891958
-
SHA1
f6720316986e72a0a8de79cbcd5eb8c32e3dab61
-
SHA256
28fcf377d1464ef9cd1f35f595e03cc63a64d3b7596b632ebc499b899803f334
-
SHA512
4e3d22b626c98fdb4fae44d1d23c4584f9a31eb1d80004be2197fcfe85c2e816e5e1b3a640cb9f859903337e62ae314c3d9adf11dd2355c9d3245a277db58825
-
SSDEEP
3072:8PWTdshlZES8CYopTEpILpXI0k39XK/iXjT2GMyWKl5jCI2fcRR:8My/aS8YpM4I0k39bXjT2uMfcT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/518cd1cff88e192996b39e1a10bdd91af6f74c6b6b54720e23ef6353d04eb857
Files
-
4fc45145a210cd1af1a9e79a05e459cb.zip.zip
Password: infected
-
518cd1cff88e192996b39e1a10bdd91af6f74c6b6b54720e23ef6353d04eb857.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ