Static task
static1
Behavioral task
behavioral1
Sample
aae0d0a0a283f084c3084d4ab67f4199dc8a349832a21b5c2810c103e67dc976.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
aae0d0a0a283f084c3084d4ab67f4199dc8a349832a21b5c2810c103e67dc976.exe
Resource
win10v2004-20240802-en
General
-
Target
e9c81414ff63385f602f0747226f43ff.zip
-
Size
127KB
-
MD5
efacd210356925af19429a445c160ff7
-
SHA1
7d20c1d446d71d2ae32cf48f71aa6131e67eb41f
-
SHA256
21fd8870f95f02d728dacc2f5d79310e2944189a154df82a38e5017c1cb8651e
-
SHA512
bc90c8484545ec26bdafb8084c27d32f51272dff6f1b7f88b6274cb1c9c3ef2ddcb2e18486d80fb6911b0b1cfcacc2146e6b6bf8140188cf46296baa51a5c8de
-
SSDEEP
3072:4ip8g9EvuOxwsI1E7u7CHyEmNypSbQKSFI73hQeAtG0SXpewNp:Eg9EvTI6DXmNoSbQKZRQeAUow7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/aae0d0a0a283f084c3084d4ab67f4199dc8a349832a21b5c2810c103e67dc976
Files
-
e9c81414ff63385f602f0747226f43ff.zip.zip
Password: infected
-
aae0d0a0a283f084c3084d4ab67f4199dc8a349832a21b5c2810c103e67dc976.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ