Static task
static1
Behavioral task
behavioral1
Sample
75c6a7ee973b556a2a3914a9e4b18bc019636e70fb6f4c2f8c6f7da0af050cbb.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
75c6a7ee973b556a2a3914a9e4b18bc019636e70fb6f4c2f8c6f7da0af050cbb.exe
Resource
win10v2004-20240802-en
General
-
Target
ef26675fcf2460ba924c36fc141075e31e827312da5f208b726b50f43c7d8c7e.7z
-
Size
4.2MB
-
MD5
38984a7c2ac3802d4ac0c6d0bfb388e5
-
SHA1
4b2c3de7ec9f95a59e1ffb853df4fc18607d178c
-
SHA256
ef26675fcf2460ba924c36fc141075e31e827312da5f208b726b50f43c7d8c7e
-
SHA512
645ccfc140493187038566bd862fc1e691fd07369a6bdf13dc2cc15344ae25e1ab434865f0db4cd3508a1e7da4b74ed92a358b8b8e8a35ee95fcaade61881992
-
SSDEEP
98304:FqOXYyUb178a9q3/2sRHZhGI+jVIeYdTZPiwin+EEfH9l1x:FqOXRUb1Ia9Q2UZoISSeIXY6fdvx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/75c6a7ee973b556a2a3914a9e4b18bc019636e70fb6f4c2f8c6f7da0af050cbb
Files
-
ef26675fcf2460ba924c36fc141075e31e827312da5f208b726b50f43c7d8c7e.7z.7z
Password: infected
-
75c6a7ee973b556a2a3914a9e4b18bc019636e70fb6f4c2f8c6f7da0af050cbb.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Sections
.text Size: 111KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 692KB - Virtual size: 696KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3.3MB - Virtual size: 3.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rtext Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ