Static task
static1
Behavioral task
behavioral1
Sample
b1b3a3b2ff01c33585d2fa3eadd78741af5b421e7463450e348401be175f0a31.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b1b3a3b2ff01c33585d2fa3eadd78741af5b421e7463450e348401be175f0a31.exe
Resource
win10v2004-20250314-en
General
-
Target
fb3e83187d18858e3b8a2227271733d87279655bc146b0079f4a830d6d957981.zip
-
Size
274KB
-
MD5
7417c0350e78af9831c0c8309994d1f8
-
SHA1
e99aa950e7a6754d91bf300c13fa3a52f0915c98
-
SHA256
fb3e83187d18858e3b8a2227271733d87279655bc146b0079f4a830d6d957981
-
SHA512
03258f7ca3bc0b2dd50c5af1d61138532828e7abce8f05fdef17e5e8809cf072b9cdb8b0fcc3bdb92c4ab558a68561a30aea761640d761c5c438ce082abf13ef
-
SSDEEP
6144:bDUcqg95jZE/65qIe0QEWeOjA3jjw0e9gj6a0wmgvXWiqda:3UcqkjIGqPChO8TjFrjLyiqo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/b1b3a3b2ff01c33585d2fa3eadd78741af5b421e7463450e348401be175f0a31.exe
Files
-
fb3e83187d18858e3b8a2227271733d87279655bc146b0079f4a830d6d957981.zip.zip
Password: infected
-
b1b3a3b2ff01c33585d2fa3eadd78741af5b421e7463450e348401be175f0a31.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 310KB - Virtual size: 309KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ