Static task
static1
Behavioral task
behavioral1
Sample
cdc838911d3418ab64c9afdc7c84e78c3e65c7497c2b8f1805aff3949b74450b.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
cdc838911d3418ab64c9afdc7c84e78c3e65c7497c2b8f1805aff3949b74450b.exe
Resource
win10v2004-20240802-en
General
-
Target
4fd27bea05c680b416ee07f475fb7015.zip
-
Size
127KB
-
MD5
92cf1fd10a4930ebc71f99dc7395912b
-
SHA1
017880221d9718f18214f40bc311806ff4d2e20c
-
SHA256
9ae588ba86fa8ca492abce646e362791949aaf02b31315db85b3d0fd03082998
-
SHA512
2ec07c866a6e099d0b4891fd3895ce909f68990ca0203b6572f6d6cd704628a183367ba344c88c6e5cb0f9bc16acba8be2b70e955e82fd1bd2632fa51419ce06
-
SSDEEP
3072:fYCbHANj6jI/YZjsNJptO7zw7LYpFAUkUXp77wS6:QC0NejI/YZjsNJywLYrzlcS6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/cdc838911d3418ab64c9afdc7c84e78c3e65c7497c2b8f1805aff3949b74450b
Files
-
4fd27bea05c680b416ee07f475fb7015.zip.zip
Password: infected
-
cdc838911d3418ab64c9afdc7c84e78c3e65c7497c2b8f1805aff3949b74450b.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 14.7MB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ