Behavioral task
behavioral1
Sample
338502691f6861ae54e651a25a08e62eeca9febc6830978a670d44caf3d5d056.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
338502691f6861ae54e651a25a08e62eeca9febc6830978a670d44caf3d5d056.exe
Resource
win10v2004-20220812-en
General
-
Target
338502691f6861ae54e651a25a08e62eeca9febc6830978a670d44caf3d5d056.zip
-
Size
85KB
-
MD5
a6d064aace8dc87cd8e61477efa4ec99
-
SHA1
4e447ffd81ef0419d2e4a6b08109e51f6a153c30
-
SHA256
fc0cfc12d1fb5e432da87052e54782063beb73e4d47eb059be262bd81b1083ac
-
SHA512
d52271b10773ea1da1613096006c4ea214da7d8a403abb90c4a0fe52efbbdf9b2f7d9a55adc7001de922cb3e7c1a261448b15b9a1903ab4438c2f57efa5665b2
-
SSDEEP
1536:K9uXRry2xSYnVh/jvjoQfZyF/mB0E4MATo3pwksxYWqZNacGXt7l9+W:K9E1HzjffZSmB0E45To+kKqZNwXh3Z
Malware Config
Signatures
-
resource yara_rule static1/unpack001/338502691f6861ae54e651a25a08e62eeca9febc6830978a670d44caf3d5d056.exe upx
Files
-
338502691f6861ae54e651a25a08e62eeca9febc6830978a670d44caf3d5d056.zip.zip .ps1
Password: infected
-
338502691f6861ae54e651a25a08e62eeca9febc6830978a670d44caf3d5d056.exe.exe windows x86
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE