Resubmissions
30/12/2024, 05:11
241230-fvptcsyqcs 1030/12/2024, 05:11
241230-fvctssyqbw 1030/12/2024, 04:46
241230-fd93zaymck 1030/12/2024, 04:07
241230-epynmsxpar 1030/12/2024, 01:24
241230-bsdwvstkdk 1030/12/2024, 01:15
241230-bmjj6asrbl 1030/12/2024, 01:05
241230-bfq1nasncy 1030/12/2024, 01:03
241230-benh5ssnfp 1030/12/2024, 00:49
241230-a6hxassldp 1030/12/2024, 00:46
241230-a4y6haskgw 10Static task
static1
Behavioral task
behavioral1
Sample
32d19e06226164729a88de658e21e3667b410372f0225740cd8321aa404b0bce.exe
Resource
win10v2004-20241007-en
General
-
Target
32d19e06226164729a88de658e21e3667b410372f0225740cd8321aa404b0bce.zip
-
Size
322KB
-
MD5
246c8dcc5acab23c11b584ce15e44ce3
-
SHA1
89539b3915d8a8d99ab32ecf7f36d69ae6fd36ee
-
SHA256
32d19e06226164729a88de658e21e3667b410372f0225740cd8321aa404b0bce
-
SHA512
57099f5974d6160ff4a2eb10884d21fc1b8ce251a94f9989d81224236b8f3a2a7ac3b2b82f1ab1b82144ca86b953cbb9b0cfbb3b55c531d387e72a6912b67447
-
SSDEEP
6144:A/FOqpLVnfxMl/zqzcJa4D8FCvD1qOQIB3f7:A/FppxnfxMUeoC0OTB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 32d19e06226164729a88de658e21e3667b410372f0225740cd8321aa404b0bce.zip
Files
-
32d19e06226164729a88de658e21e3667b410372f0225740cd8321aa404b0bce.zip.exe windows:5 windows x86 arch:x86
Password: infected
f0e234e2420e60b9bbe2ea061640be35
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetComputerNameA
EnumCalendarInfoA
InterlockedIncrement
InterlockedDecrement
GetCurrentProcess
InterlockedCompareExchange
WriteConsoleInputA
FreeEnvironmentStringsA
GetModuleHandleW
EnumTimeFormatsA
LoadLibraryW
ReadConsoleInputA
FindNextVolumeW
VerifyVersionInfoA
SetComputerNameExW
FindNextVolumeMountPointW
GetShortPathNameA
LCMapStringA
GetLogicalDriveStringsA
GetLastError
GetCurrentDirectoryW
SetLastError
GetProcAddress
VirtualAlloc
CreateJobSet
CopyFileA
GetTempFileNameA
GetAtomNameA
LoadLibraryA
InterlockedExchangeAdd
SetCalendarInfoW
GetCommMask
GlobalUnWire
EnumDateFormatsW
OpenEventW
GetVersionExA
EnumCalendarInfoExA
SetFileAttributesW
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
RaiseException
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetCPInfo
HeapAlloc
HeapCreate
VirtualFree
HeapReAlloc
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
SetFilePointer
CloseHandle
ExitProcess
WriteFile
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
InitializeCriticalSectionAndSpinCount
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetLocaleInfoW
GetModuleHandleA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
Sections
.text Size: 282KB - Virtual size: 281KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ