Static task
static1
Behavioral task
behavioral1
Sample
f640cf227f6b33fef5a293608088e586f53fb30755a64ca6ad3d24a3c820f341.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f640cf227f6b33fef5a293608088e586f53fb30755a64ca6ad3d24a3c820f341.exe
Resource
win10v2004-20240802-en
General
-
Target
6ef3f306a1f2e641596d5696cdd882e6.zip
-
Size
127KB
-
MD5
8586bf15edd977205b3421205ef1939d
-
SHA1
4363d2b72c5dd7c187548c5cedc17962de6f2f40
-
SHA256
0c9f9e0d1a7cb06a76f42c2c5e88741bb3237871cb10793dabbc9ed5549d65e3
-
SHA512
0eb316dc0080c5d1ea2bad6bfeef54477e31e9f93dcdc2a754ad6b38622dd25d94ad1bdf372c2cdd7f05061376a74f43ecf9de81e8a1dd3559fb74fc7bbe1c39
-
SSDEEP
3072:aPccuy7vcZT91zmOlaN5SBZcLYhPYgBrpEMC8iii+Z:a0cuekp9BmoarLYhPYUpEMQid
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/f640cf227f6b33fef5a293608088e586f53fb30755a64ca6ad3d24a3c820f341
Files
-
6ef3f306a1f2e641596d5696cdd882e6.zip.zip
Password: infected
-
f640cf227f6b33fef5a293608088e586f53fb30755a64ca6ad3d24a3c820f341.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ