Static task
static1
Behavioral task
behavioral1
Sample
f726d99ec133a3978b71773f1447702e7556087c4a34e318d6761d8b2e779198.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
f726d99ec133a3978b71773f1447702e7556087c4a34e318d6761d8b2e779198.exe
Resource
win10v2004-20240802-en
General
-
Target
7965f36e189a930cab40e8e9720e1373.zip
-
Size
127KB
-
MD5
0a88c6d104ba898922707a648b743697
-
SHA1
32a85cd723e93d7fc04bb41d2c3765b08cd2e183
-
SHA256
09579b48c9f0250709d94d094695d76802dbb7048348c8196a087a22037ba2ec
-
SHA512
a4fe6966dfffa948f835fbbd0c2fa61370c2733dc2fe67179fb920d0b371595cd5d040cb6f1f6117b3527d25642da14df10f1017eeaa45ed1e20e8fe72e5e78b
-
SSDEEP
3072:4ByBl1VsFnVEj04hm52iCcxDFeNSSiFPTTo2czHU:40VssjRal5TRNTe0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/f726d99ec133a3978b71773f1447702e7556087c4a34e318d6761d8b2e779198
Files
-
7965f36e189a930cab40e8e9720e1373.zip.zip
Password: infected
-
f726d99ec133a3978b71773f1447702e7556087c4a34e318d6761d8b2e779198.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ