Static task
static1
Behavioral task
behavioral1
Sample
f6c12666bafb687866fe4257c40bf01ba86598260bd6a403eb40658f3998863f.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f6c12666bafb687866fe4257c40bf01ba86598260bd6a403eb40658f3998863f.exe
Resource
win10v2004-20240802-en
General
-
Target
25fa0e8a5267c9642c2ac9ee043d58c7.zip
-
Size
127KB
-
MD5
cd6919d95c72ef16f0733b22039db57f
-
SHA1
c72b1b7e7cf890cc2fe2c11a4d95938684bb7135
-
SHA256
09628ebea00535f37a43fa04a866d36d58d94e8433522a4588022728d54f43d9
-
SHA512
8f1cbae06cc5e8cda1c2a943cbec9fd58ab939ba7539e94ee33a528c36703ff8eeef85f321740180a0d0d7aceb4821ab48d32d9f65222754a028facbf7706688
-
SSDEEP
3072:fVgRImywTtBVX9LHsEPZjpiLVcc3POGra2tbt0N:xmnBVzNsZcc3POcE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/f6c12666bafb687866fe4257c40bf01ba86598260bd6a403eb40658f3998863f
Files
-
25fa0e8a5267c9642c2ac9ee043d58c7.zip.zip
Password: infected
-
f6c12666bafb687866fe4257c40bf01ba86598260bd6a403eb40658f3998863f.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 14.7MB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ