Static task
static1
Behavioral task
behavioral1
Sample
9ac66fb8463ee1987378205137d174f9a25f53c7272241694822eb3ba19cd866.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
9ac66fb8463ee1987378205137d174f9a25f53c7272241694822eb3ba19cd866.exe
Resource
win10v2004-20240802-en
General
-
Target
05e47838ce34b331a5cf13b3225c261a.zip
-
Size
127KB
-
MD5
9509760125a78e7fd715734dd78d286d
-
SHA1
29a2bdbbef468502d59daaf470ef993d337eafc6
-
SHA256
1eb9a67996cb624caaa3fb29cd201b3bef079fbabb6c073c6ac98b4399bea37a
-
SHA512
393e42f63780b555e4538e8c132a0f061775098a15c3f86a7f53a70b1d452a74c4f83fc9f7092e9224d4d10a2be4b3fe4f66db0b645b0b72e9c542263dfbdccb
-
SSDEEP
3072:cOFLdqzN36snF+ANjUBWUsT1bz67mrEBQ80a/:ckd+KgFXAw3xw+80a/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/9ac66fb8463ee1987378205137d174f9a25f53c7272241694822eb3ba19cd866
Files
-
05e47838ce34b331a5cf13b3225c261a.zip.zip
Password: infected
-
9ac66fb8463ee1987378205137d174f9a25f53c7272241694822eb3ba19cd866.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ