Static task
static1
Behavioral task
behavioral1
Sample
0c7b1286faab8a268a64abe49d06b1db5394ce8bddd8a6ade6551bc1a04e4597.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0c7b1286faab8a268a64abe49d06b1db5394ce8bddd8a6ade6551bc1a04e4597.exe
Resource
win10v2004-20240802-en
General
-
Target
96d660ddf6d333489016ee265b126502.zip
-
Size
11KB
-
MD5
0658100c56b5c2ffa7a14285a87c86e1
-
SHA1
b2042ba32136228276d9b9e3cd8071873a8fd968
-
SHA256
cc8003b9e69e7871ff62ceadd49f7d2c09192da78e59590e042fe2029c7ca079
-
SHA512
e51d3df2b6f35e7114873a6d0c294d2aadd76db5068a98a09c97b7884f823aec366f607670556daa0d4bddc2532b5f8a559b5e000504cff7617920c7b598d18a
-
SSDEEP
192:XqNiuZX0I2IlTdbGlw3cAPVuU1lAap9/YeiowWqIiV1zA3dgr/N7y72DiPs69oc9:6FEIFTdbGlw3Z9uU1aQwWOIi3T7Ut06P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/0c7b1286faab8a268a64abe49d06b1db5394ce8bddd8a6ade6551bc1a04e4597
Files
-
96d660ddf6d333489016ee265b126502.zip.zip
Password: infected
-
0c7b1286faab8a268a64abe49d06b1db5394ce8bddd8a6ade6551bc1a04e4597.exe windows:4 windows x86 arch:x86
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 108KB - Virtual size: 106KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ