Static task
static1
Behavioral task
behavioral1
Sample
3d5b241906bbf29ba1ea0831cd0d20a5ab962db92a6570d58cdd91634610a6c6.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3d5b241906bbf29ba1ea0831cd0d20a5ab962db92a6570d58cdd91634610a6c6.exe
Resource
win10v2004-20240802-en
General
-
Target
51b54a6feda74978f23ce94ee8d89173.zip
-
Size
127KB
-
MD5
c2cf5a38c724ce6023eeb5f8a43a7e27
-
SHA1
25f221c6bf40173aee03a45319f4171517478305
-
SHA256
c1b08f45701480850d2b7c7e4add503842b0321b8950db9532eaa5cd8af7f446
-
SHA512
92aa0e953952b5e2e99bcc77cc6b55f5f5b486575a906238a9d02f4274b9b83267f2d4dfe45d61022b8e231263b8c45f418e8bd8d91a508e405784fcdf747395
-
SSDEEP
1536:eqYND0/fMyex6sHxZtSE+pwCa0/XvoUlkyeVZUkSKN2doQypxAfmXv666DXbHc4Q:PIDUsxZtSi4P/kN2KrS+/oH8MrpaKG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/3d5b241906bbf29ba1ea0831cd0d20a5ab962db92a6570d58cdd91634610a6c6
Files
-
51b54a6feda74978f23ce94ee8d89173.zip.zip
Password: infected
-
3d5b241906bbf29ba1ea0831cd0d20a5ab962db92a6570d58cdd91634610a6c6.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 14.7MB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ