Static task
static1
Behavioral task
behavioral1
Sample
4489bbcc618649c69d4135bf5e3108362937487f09c78121e591fdb0063937a0.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
4489bbcc618649c69d4135bf5e3108362937487f09c78121e591fdb0063937a0.exe
Resource
win10v2004-20240802-en
General
-
Target
01674f197d7c8b00f1764a46ca6b47e9.zip
-
Size
127KB
-
MD5
1b0ff39d297192507f3cf03e4a43ea76
-
SHA1
aa662a0591c6e29bfc29b1e184005b6964001a7c
-
SHA256
28a6992270ed189c98117b4dca4373f55699de481d66d4066769f51944f7b04c
-
SHA512
6566456f52bbcfaf6f8e1ba6c8b1a07a99b44840fbac8c0159a7def036f9a09f79c533cb9bd913ff104804d4b922ac1dff5153b21385c0c6cfa17b1421dcc4a6
-
SSDEEP
3072:UJgl/yrrg60/cyssYzdMgWpd1zyVotyQo4LI9UG:ugl/yrrgNc7ZegWn1zy2twIyl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/4489bbcc618649c69d4135bf5e3108362937487f09c78121e591fdb0063937a0
Files
-
01674f197d7c8b00f1764a46ca6b47e9.zip.zip
Password: infected
-
4489bbcc618649c69d4135bf5e3108362937487f09c78121e591fdb0063937a0.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ