Static task
static1
Behavioral task
behavioral1
Sample
97db5973c7e6fb1acfe441e9699a60e7f24af2925ad9be5535bcf1ed3d69fffb.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
97db5973c7e6fb1acfe441e9699a60e7f24af2925ad9be5535bcf1ed3d69fffb.exe
Resource
win10v2004-20240802-en
General
-
Target
c00808cc27aeb6eac9e5ad3591cbbabe.zip
-
Size
1.0MB
-
MD5
388cb7b80e211d9f50c7ad558a929607
-
SHA1
4f62dbb7a80e2b899cff6b973499f86ba7593509
-
SHA256
fde194401733cd299dd8b43c0c798590fe403abb3087e9df9369284ad3dd8d0b
-
SHA512
b6bbba679abb387ffe8200029b197a86ce90a9969462e5f61bc80b444811796d631bfee738fc1c0eb8bb3f2e43cd6696f150accc1bb68945b991b9c9d755a5f8
-
SSDEEP
24576:mG6Mn7zgjdT+9y2Xjt5WUE7m292r3pSmlbaEBUB6:mVAPgjdC82XPj6X9s3p9lbY6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/97db5973c7e6fb1acfe441e9699a60e7f24af2925ad9be5535bcf1ed3d69fffb
Files
-
c00808cc27aeb6eac9e5ad3591cbbabe.zip.zip
Password: infected
-
97db5973c7e6fb1acfe441e9699a60e7f24af2925ad9be5535bcf1ed3d69fffb.exe windows:1 windows x86 arch:x86
Password: infected
500ff1538958cc73738bf0c262a1773f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
GetModuleHandleA
user32
MessageBoxA
Sections
.dafixer Size: 541KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dafixer Size: 10KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dafixer Size: - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dafixer Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dafixer Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dafixer Size: 512B - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 122KB - Virtual size: 560KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dafixer Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE