Static task
static1
Behavioral task
behavioral1
Sample
30dc6bb615c0273befff0c6f396ce56cab7052849b64844ab4f12ce0a28c3a8d.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
30dc6bb615c0273befff0c6f396ce56cab7052849b64844ab4f12ce0a28c3a8d.exe
Resource
win10v2004-20240802-en
General
-
Target
c386399b2ffb5650f85f3711cf63f314.zip
-
Size
104KB
-
MD5
c39e81f69aa3f2d31dea8e35274232b8
-
SHA1
51a3e17a86e5d58860835955d34f894cfb8ad44d
-
SHA256
d97e826106f342a21bfa7cd0a65caa95b9af06ce0bcce4e154a1e1ae0c02f6ee
-
SHA512
535b2584aace34a89c3b986883c92726f32f964d12faf67fb73966e6541aad244b3c010c4e7430f2a8c721ba6c4fcb834d1aacf959f66e821e2b9606b0d670d9
-
SSDEEP
3072:TBFkBanMfGpQVsp7D5oNexx7pp4XDg0nbNReoPt2pWHQ:TJMGm25ThpeXDnRom2CQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/30dc6bb615c0273befff0c6f396ce56cab7052849b64844ab4f12ce0a28c3a8d
Files
-
c386399b2ffb5650f85f3711cf63f314.zip.zip
Password: infected
-
30dc6bb615c0273befff0c6f396ce56cab7052849b64844ab4f12ce0a28c3a8d.exe windows:6 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 102KB - Virtual size: 12KB