Static task
static1
Behavioral task
behavioral1
Sample
452c77d9be7b82107a1325d98f75d0194e61c311e4fa7204a15b52e42bc3c2d2.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
452c77d9be7b82107a1325d98f75d0194e61c311e4fa7204a15b52e42bc3c2d2.exe
Resource
win10v2004-20241007-en
General
-
Target
20790276229.zip
-
Size
3.4MB
-
MD5
e36509110661b196b0e7cd0c4b3c3106
-
SHA1
eafc405a7df35a842fa410577ab852fffbb0898b
-
SHA256
0a95f4183ce8b2226160c92031f77b4ba5a1e96728a20e773d120ffa180cbaae
-
SHA512
b1f0d346529f327503a164c04d8bc61af827e0f980aca7e2c35bceb0a1b2fc551b42ba947847d9bd3a77f9fbd831fd87602bf9df0ae253c0cb622f31f76c46a5
-
SSDEEP
98304:PRQmu3qm48hoDPS+XvAvV9ucnqnudIZanRubjbCZ:GmuG82OiGmcnqnudTnig
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/452c77d9be7b82107a1325d98f75d0194e61c311e4fa7204a15b52e42bc3c2d2
Files
-
20790276229.zip.zip
Password: infected
-
452c77d9be7b82107a1325d98f75d0194e61c311e4fa7204a15b52e42bc3c2d2.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 3.6MB - Virtual size: 3.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ