Static task
static1
Behavioral task
behavioral1
Sample
άڽ/άڽ.exe
Resource
win7-20240903-en
General
-
Target
12501cc11c93d3f179af213c02a21020a91b74c2d4d781b474b1de403bc6ddc3
-
Size
2.0MB
-
MD5
3c363f8afd91e103cd864cbc3df5c314
-
SHA1
934ad43ba0b75e9685280910b5844a6e731162ff
-
SHA256
12501cc11c93d3f179af213c02a21020a91b74c2d4d781b474b1de403bc6ddc3
-
SHA512
3a3439301a8e9affa43f997b1f9a5fd972105b18c1f894ba17f264e46846083b766f40aee6185b2b5d7ae120eddf8fae52952e1ec9b7f25eb1a9a98fbaa84a12
-
SSDEEP
49152:yIk0QFuZSYNLMOG4Ua/CCJUpmyhnddqGB3J7xj4JLSeDyhHa4/wpo:yIkTrOG4xCCGUyhndd/9JN4geDyhL/wW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/άڽ/άڽ.exe
Files
-
12501cc11c93d3f179af213c02a21020a91b74c2d4d781b474b1de403bc6ddc3.zip
-
άڽ/άڽ.exe.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 344KB - Virtual size: 772KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
aonlwqzm Size: 856KB - Virtual size: 856KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ywupidyi Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
άڽ/űҪϵ.JPG.jpg