Static task
static1
Behavioral task
behavioral1
Sample
5d787c488ce86578613774742d3b06d51c1310aa2d85e3e55f24e95fa3c90992.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
5d787c488ce86578613774742d3b06d51c1310aa2d85e3e55f24e95fa3c90992.exe
Resource
win10v2004-20240802-en
General
-
Target
551ae6ef96aab4dca8281b891fba2a6f.zip
-
Size
1.7MB
-
MD5
b9f027d0e85f87c9fc766826de894385
-
SHA1
acde80a00eb7aac3487e71fef7a37f0f3ccbb156
-
SHA256
0655b109a89918e1bce2c230b4ce730199094fb5db8df535eebed5b45d39e119
-
SHA512
0c4b401ba14cb8fc020d62ea8ff5fad40415e96f787b81a5695d7c609a67e18cebe40644493a943a8257a8c3f9a90bde025bb02f862bde3b6fb5ad847c1966eb
-
SSDEEP
49152:e4eYrAzNHrMFDuza318Xo8AhBIpqu08Tbed:qNcE018YfX6Fad
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/5d787c488ce86578613774742d3b06d51c1310aa2d85e3e55f24e95fa3c90992
Files
-
551ae6ef96aab4dca8281b891fba2a6f.zip.zip
Password: infected
-
5d787c488ce86578613774742d3b06d51c1310aa2d85e3e55f24e95fa3c90992.exe windows:1 windows x86 arch:x86
Password: infected
500ff1538958cc73738bf0c262a1773f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
GetModuleHandleA
user32
MessageBoxA
Sections
.dafixer Size: 541KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dafixer Size: 10KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dafixer Size: - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dafixer Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dafixer Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dafixer Size: 512B - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 122KB - Virtual size: 560KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dafixer Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE