Static task
static1
Behavioral task
behavioral1
Sample
a3dd5e28b1b551cbb99219d143efe1e888180cb6d7e20e22b78172e17e046336.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
a3dd5e28b1b551cbb99219d143efe1e888180cb6d7e20e22b78172e17e046336.exe
Resource
win10v2004-20250129-en
General
-
Target
a3dd5e28b1b551cbb99219d143efe1e888180cb6d7e20e22b78172e17e046336.zip
-
Size
1.4MB
-
MD5
32c7d8dc5f5d986dab756a5549028103
-
SHA1
a6862c5f9698f920bd16f8b8c2ef8d6a36489ea6
-
SHA256
a597407449e99e42471577da2506f2e9eae81d46aaf99070213373920ba6c215
-
SHA512
2493d9cba02a17c94382a94d878ba7e1976f1b1bc49fe51a6cbdda2265f90b2f86c96ba7dd509483d42d8bbc91f748383ac9ecb57bde5360095007c890324736
-
SSDEEP
24576:4HegEWYvfL2iVyxHB3hAGPOHG79A0GSznzzbcMhZJi1WrAQxx7e/EPJgj8DD/31u:N53oxHB3hAA9NG+fbca6WrAQx4/iGj6U
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/a3dd5e28b1b551cbb99219d143efe1e888180cb6d7e20e22b78172e17e046336.exe
Files
-
a3dd5e28b1b551cbb99219d143efe1e888180cb6d7e20e22b78172e17e046336.zip.zip
Password: infected
-
a3dd5e28b1b551cbb99219d143efe1e888180cb6d7e20e22b78172e17e046336.exe.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 244KB - Virtual size: 440KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 41KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 11KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 174KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 921KB - Virtual size: 924KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE