Static task
static1
Behavioral task
behavioral1
Sample
9cb0916bb6a79e43bb157daf988d80cf66ccb7c20e252406f079ad9dbba2810f.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
9cb0916bb6a79e43bb157daf988d80cf66ccb7c20e252406f079ad9dbba2810f.exe
Resource
win10v2004-20240802-en
General
-
Target
5b741fa383e84d7904b585ba9b2e384b.zip
-
Size
127KB
-
MD5
a7407d24e1a90cf6d31d319ba043623b
-
SHA1
5d1effe362c8405fb35cdcc359c9f178c8181761
-
SHA256
8addf621510c975f44d2480473f963945c9457b4687307b9c2ce02d3ba876ae8
-
SHA512
c6d7c7f7f4d8ecea553e1d54b568fd4982c01a2dcb5c5a2de2c2b86ce40bfb4dc7bf603e116e855999d75b2cb566fbee5261c754c6369681d18e52896135f149
-
SSDEEP
3072:ideDU3PfvHMiDvDkJx8feyZ3woepdZoQ+gNr:ideQ3PfvDkz8fuoIwYNr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/9cb0916bb6a79e43bb157daf988d80cf66ccb7c20e252406f079ad9dbba2810f
Files
-
5b741fa383e84d7904b585ba9b2e384b.zip.zip
Password: infected
-
9cb0916bb6a79e43bb157daf988d80cf66ccb7c20e252406f079ad9dbba2810f.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ