fafd551638daa4ab17ebdc71f2bffd8599332b1f1e95409af51870502cd65e38[.]zip

Resubmissions

11/11/2024, 13:48

241111-q3313aypg19

11/11/2024, 13:37

11/11/2024, 13:36

11/11/2024, 13:16

11/11/2024, 13:13

Sharing

Copy URL Twitter E-mail

General

Target
fafd551638daa4ab17ebdc71f2bffd8599332b1f1e95409af51870502cd65e38.zip
Size 1.7MB
Sample241111-q3313aypg1
SHA256 d3bcd07cac842a5f7a0c99f07454dea366024baf3cd85fba3c12830a2c580f0a
MD5 4c139c0588e27cbb3d5ba6f7d7be2879
SHA1 f84231e796f84946fd5d00f5cae95fc5f3c3f962
SHA512 f1542b3700567f4e20c600785147b10c56f5fc9344b330576ca299e3d1062347927ff27ce4f0a7c50a92a9429e86c38d7c9456823984fd4c4f5720749719838f
SSDEEP 49152:8uKokKfq7ORxpheX7v4CkZKgJEmu7zS0h+b0:DnW7ORx+z4nZKyEJ7by0
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/fafd551638daa4ab17ebdc71f2bffd8599332b1f1e95409af51870502cd65e38.exe

File Explorer

fafd551638daa4ab17ebdc71f2bffd8599332b1f1e95409af51870502cd65e38.zip

.zip 1.7MB
fafd551638daa4ab17ebdc71f2bffd8599332b1f1e95409af51870502cd65e38.exe

.exe 1.8MB

fafd551638daa4ab17ebdc71f2bffd8599332b1f1e95409af51870502cd65e38.zip

SHA256 d3bcd07cac842a5f7a0c99f07454dea366024baf3cd85fba3c12830a2c580f0a
MD5 4c139c0588e27cbb3d5ba6f7d7be2879
SHA1 f84231e796f84946fd5d00f5cae95fc5f3c3f962
SHA512 f1542b3700567f4e20c600785147b10c56f5fc9344b330576ca299e3d1062347927ff27ce4f0a7c50a92a9429e86c38d7c9456823984fd4c4f5720749719838f
SSDEEP 49152:8uKokKfq7ORxpheX7v4CkZKgJEmu7zS0h+b0:DnW7ORx+z4nZKyEJ7by0
MD5 SHA1 SHA512 SSDEEP

Password

infected

fafd551638daa4ab17ebdc71f2bffd8599332b1f1e95409af51870502cd65e38.exe

IMPHASH 2eabe9054cad5152567f0699947a2c5b
SHA256 fafd551638daa4ab17ebdc71f2bffd8599332b1f1e95409af51870502cd65e38
MD5 c8bdae4b54ec9fb34babe5908c1273f1
SHA1 53111c9f481f86109c4f045c7c65523d9f5906b0
SHA512 ab78acf0a806ad909c8c6e46d13e1428efa29eea35620e6a9a40f3b4e08333a6ae83671a39af96a14f0b71d2dd7f021b9354393fa0e4962d1c9b241a71814450
SSDEEP 24576:Y7Y2nzJAFNcKtO5fE7T2rVP2DoKomRXvYU/S7VCiG3M02N7nVDJXgPGaoz7HkcKb:sYUzOHjSfE/+0RAhQ7j2RV1SGaAX1k
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

Major OS version

Entry point

7000064

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

Size

88KB

Virtual Size

2.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

512B

Virtual Size

2.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

olxddulo

Size

1.7MB

Virtual Size

1.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

pxsrqflz

Size

1KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.taggant

Size

8KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

fafd551638daa4ab17ebdc71f2bffd8599332b1f1e95409af51870502cd65e38.zip

fafd551638daa4ab17ebdc71f2bffd8599332b1f1e95409af51870502cd65e38.exe

kernel32

generic