Behavioral task
behavioral1
Sample
1dcb98c12bbe496def54896870d4f75a8e5a9715bb401c0482d78a6b5c5006df.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1dcb98c12bbe496def54896870d4f75a8e5a9715bb401c0482d78a6b5c5006df.exe
Resource
win10v2004-20220812-en
General
-
Target
7988696147.zip
-
Size
3.9MB
-
MD5
ae000a8e6a2ed57603926affb950cd5a
-
SHA1
b68ad3920c8562cf3a971a7f0234c358dc2d8699
-
SHA256
5f45b16edf8d5832789d91d27887b2ae42b23a8ec0e336fa815ff15e823f01ca
-
SHA512
79d708d7dd294154022c3348dad913cdad76036e058e7072a2380091495de7dc66458f9100d178623466690157ffa2e113f0abd39824805d4321f8daec33274c
-
SSDEEP
98304:gRBjXHoge20/MOGc9r8GFcz0dbYa9f0I2/tRTaHwDUr:s5HL0/MOG8WodYqJGSHwi
Malware Config
Signatures
-
resource yara_rule static1/unpack001/1dcb98c12bbe496def54896870d4f75a8e5a9715bb401c0482d78a6b5c5006df upx
Files
-
7988696147.zip.zip
Password: infected
-
1dcb98c12bbe496def54896870d4f75a8e5a9715bb401c0482d78a6b5c5006df.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 8.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3.9MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE