Static task
static1
Behavioral task
behavioral1
Sample
70f05e15-fe78-4bae-be25-e615c759bed6.exe
Resource
win10-20220223-en
General
-
Target
03eb739a8f63a2ba0934ff63eb38e29a52d63ed98aa36f5fadbbf91065f06290.zip
-
Size
340KB
-
MD5
46947232982cf0af2d98092ed658115b
-
SHA1
72ac3df4226df7a8bbde790b8d0be6a8e62f9f26
-
SHA256
d2e20f9e3608a78fd66be043a1315422082eef4267413d84fc9a49e6a86f1783
-
SHA512
20d2e253c8052908b486864088398eae7d6b1e5dd1a5f3c6548df855625c894a425c564cc2a497807469316e7a1364c6d509276e20b8d40fafb3decae5b7e9e9
Malware Config
Signatures
-
resource yara_rule static1/unpack001/70f05e15-fe78-4bae-be25-e615c759bed6 upx
Files
-
03eb739a8f63a2ba0934ff63eb38e29a52d63ed98aa36f5fadbbf91065f06290.zip.zip
Password: infected
-
70f05e15-fe78-4bae-be25-e615c759bed6.exe windows x64
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 932KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 345KB - Virtual size: 348KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE