Static task
static1
Behavioral task
behavioral1
Sample
1c7f221b733c095a20d6ff28cad705733136dad1e1f457099ab0978187d54b48.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
1c7f221b733c095a20d6ff28cad705733136dad1e1f457099ab0978187d54b48.exe
Resource
win10v2004-20240802-en
General
-
Target
e549ac077ac30934b4a578b387a96282.zip
-
Size
127KB
-
MD5
277182456f0fe101376a1c95787d7929
-
SHA1
ac587f7b41813b63cf62c986bb933af54dfb2c76
-
SHA256
045f668a951d4e1e9f0d4bb81bc899fbf38c0174e7148a4c4cc1829a86dc801f
-
SHA512
04fbcfde11fa0498d79d816248d68a586e7655311d588eee4206423810a3a36da6d30870aba7fa183802a31c69880b062e07e3bbbcfcb41f69b9d7b441757d26
-
SSDEEP
3072:tu9BaxU1ifnvgqBPpF1jylLUdq5/KRQFcp+gDeU:0KakPvgOPpPaLUyqp+gyU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/1c7f221b733c095a20d6ff28cad705733136dad1e1f457099ab0978187d54b48
Files
-
e549ac077ac30934b4a578b387a96282.zip.zip
Password: infected
-
1c7f221b733c095a20d6ff28cad705733136dad1e1f457099ab0978187d54b48.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ