Static task
static1
Behavioral task
behavioral1
Sample
0aa42db2fa7ea22795ca89d6f1149b4111240322dbf5ac248f73264e1a7c695c.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0aa42db2fa7ea22795ca89d6f1149b4111240322dbf5ac248f73264e1a7c695c.exe
Resource
win10v2004-20240802-en
General
-
Target
fdb00609f8b9fa4b851995c333f0f0e9.zip
-
Size
127KB
-
MD5
4a74b656ab5bb08b2539c9c4ecff091f
-
SHA1
df664a3a5e0af558eb0e8712ad1520517e671d5a
-
SHA256
f0148da398d11e2cbfac223fc17a3b7cbc3b8a1d83351a6ee6df3d0317a4cf61
-
SHA512
28872bda30ee650c992cc2e3da5a7e7fed84abc5c0ba9adf69ea89b23374b2a0e6b21208d9d310cdf0a3d4471df4b6439c29d87cfefc8719498c6face67403ae
-
SSDEEP
3072:wOE3BsXILxna/320y13fuLTdwoojk4MhMsz7EuldS/FS+4F:u3BZlna/G0MuLZHoj/MGsz7dvK4F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/0aa42db2fa7ea22795ca89d6f1149b4111240322dbf5ac248f73264e1a7c695c
Files
-
fdb00609f8b9fa4b851995c333f0f0e9.zip.zip
Password: infected
-
0aa42db2fa7ea22795ca89d6f1149b4111240322dbf5ac248f73264e1a7c695c.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ