Static task
static1
Behavioral task
behavioral1
Sample
f849bab8ee416ddf507a8caa4c11a529d9c4c8d59f2b45a252aca2bbbf418825.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
f849bab8ee416ddf507a8caa4c11a529d9c4c8d59f2b45a252aca2bbbf418825.exe
Resource
win10v2004-20240802-en
General
-
Target
e9d73cc569b1d633a9eb6d0c0dbd8c01.zip
-
Size
4KB
-
MD5
0da02a26637086ec1bd18a46f22686ad
-
SHA1
22ff9124d3331dd87ce3bbdbf4cb685a691d2ff6
-
SHA256
f18c32c62f15fcd924f8137ab48c6363599e974f3d0902946f080a0cfd4a98f6
-
SHA512
0b0e0997054146bbc9b08470b60cf1c4e951e24fb398f6069aefced444f9d1d14ea91f61d25ca61e1d77a9ad9f3a95d92bc6af395bcc025566f22b35ae98d96a
-
SSDEEP
96:bmi/xZse0VtNE3+3iGUacJ1nTMPHp/OM1HZWz+Ycj5WiVJiK:bm9ttTYacJ1nTEJ/OMZZWKVRjr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/f849bab8ee416ddf507a8caa4c11a529d9c4c8d59f2b45a252aca2bbbf418825
Files
-
e9d73cc569b1d633a9eb6d0c0dbd8c01.zip.zip
Password: infected
-
f849bab8ee416ddf507a8caa4c11a529d9c4c8d59f2b45a252aca2bbbf418825.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 752B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 496B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE