Static task
static1
Behavioral task
behavioral1
Sample
Maze.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
Maze.exe
Resource
win10v2004-20250314-en
General
-
Target
a0c4b8e5e7f294f98917f0e59dc4800cd8d0d3bffac01bdf5d7558341010a972.zip
-
Size
224KB
-
MD5
57a75281fbf15afcc78e06e875815c1a
-
SHA1
fc86f7bb62ac6b2385aabfccdeb62aedea7ab28e
-
SHA256
a0c4b8e5e7f294f98917f0e59dc4800cd8d0d3bffac01bdf5d7558341010a972
-
SHA512
baa1c946b6ecbdf7b29cd848dd83672c4302a2621b1fc1055d9d3c7c99acd7062f95f71548792f0259242db45c7856906ab3ab55c670c85ba8c9aa7382b2c210
-
SSDEEP
6144:RmcVTfqSg9OX1VG3z2FQKE3hC8Bn/Hyelkw8FSa7UXr634:RmQTCSgsXzGXb88FVgF7U+4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Maze.bin
Files
-
a0c4b8e5e7f294f98917f0e59dc4800cd8d0d3bffac01bdf5d7558341010a972.zip.zip
Password: infected
-
Maze.bin.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 232KB - Virtual size: 232KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE