Behavioral task
behavioral1
Sample
d95b5bf9ca97c1900de5357743282bab655d61d616606485088e1708559b7cf1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d95b5bf9ca97c1900de5357743282bab655d61d616606485088e1708559b7cf1.exe
Resource
win10v2004-20220812-en
General
-
Target
8114116290.zip
-
Size
422KB
-
MD5
488fa3a4d84827fdf72d8042fe8390c5
-
SHA1
bf605404160d2775f6d585269cfdde759b1b7abf
-
SHA256
792ab07214383d12fb6d9481cd2cc5ec5ef8962338eea3787784132bc4f553ba
-
SHA512
d2f3a162cb0525f4fa3e13e067445be1ce9d6105b85961fcdd28c2c6d24e0a16f9ab4d686b0c85d929402a26f7f34212e6bbaf6da4021d50cb77bcdd0c4b6611
-
SSDEEP
12288:EyiKyeHB5fMv9VLYrNK5RhwaNCnbvBpv58I:vHB5m9ZYJKPbCnDBpvuI
Malware Config
Signatures
-
resource yara_rule static1/unpack001/d95b5bf9ca97c1900de5357743282bab655d61d616606485088e1708559b7cf1 upx
Files
-
8114116290.zip.zip
Password: infected
-
d95b5bf9ca97c1900de5357743282bab655d61d616606485088e1708559b7cf1.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 732KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 409KB - Virtual size: 412KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE