Static task
static1
Behavioral task
behavioral1
Sample
d8488f2a0865938072a5c2ba416862a6af2628d6aca143ee9d1765d82479d238.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d8488f2a0865938072a5c2ba416862a6af2628d6aca143ee9d1765d82479d238.exe
Resource
win10v2004-20240802-en
General
-
Target
03C39C6271538AE6.zip
-
Size
229KB
-
MD5
dfadf19d4b41c243d4fa68d52c472ac2
-
SHA1
4729d96838f2b58d48dab6d3af98338690cd0ba7
-
SHA256
4461895015ea4c5700a7276af96718063c912b16f91bda2888fbb6a35f995092
-
SHA512
285cbe6dcd6eeb5fd4fc7433bb54c7edf6553aa368cc5bb1bcde9686fa0ec2597849bdd6059706bcbd7445830332bbbcd2619068d9705319e3eebc7b44a25619
-
SSDEEP
6144:lx1iXOiz8Qppc2Ejcy76PdpNvRG+++QVTAXXnt:lx1i8QKjcyobAVa9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/d8488f2a0865938072a5c2ba416862a6af2628d6aca143ee9d1765d82479d238
Files
-
03C39C6271538AE6.zip.zip
Password: infected
-
d8488f2a0865938072a5c2ba416862a6af2628d6aca143ee9d1765d82479d238.exe windows:6 windows x86 arch:x86
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 277KB - Virtual size: 277KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ