Behavioral task
behavioral1
Sample
dae0c2e0c7356cc98297a7a29f4ba57308deef4efe7c5491b0b11f53dbc033ae.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
dae0c2e0c7356cc98297a7a29f4ba57308deef4efe7c5491b0b11f53dbc033ae.exe
Resource
win10v2004-20230220-en
General
-
Target
dae0c2e0c7356cc98297a7a29f4ba57308deef4efe7c5491b0b11f53dbc033ae.zip
-
Size
360KB
-
MD5
3db39a51c3f92120b67f0c5f6e902763
-
SHA1
17284cb3148181bc52d62a41e70888acd55b8fef
-
SHA256
80b32b7341a69a0b2d8120e678d496e9cfe3cc20f58bae82c1f539083fa03d23
-
SHA512
b27a3bf895c11c79c147d00ca10d37696463062beaf0f36e405d68f197a403680e33864d9d168a3226638d70a22c2cd577f10bec4b0b90d6ab7657c28b194816
-
SSDEEP
6144:Eb06133YpnTiyX3yFLTTTsqgsnG5aR6EMytLJ4rHGQQBm3Tr8RcUqx7hhB160Gl:EQ6t3KX4TTTsLmRHJlBm3Tr8RYtN169l
Malware Config
Signatures
-
resource yara_rule static1/unpack001/dae0c2e0c7356cc98297a7a29f4ba57308deef4efe7c5491b0b11f53dbc033ae upx
Files
-
dae0c2e0c7356cc98297a7a29f4ba57308deef4efe7c5491b0b11f53dbc033ae.zip.zip
Password: threatbook
-
dae0c2e0c7356cc98297a7a29f4ba57308deef4efe7c5491b0b11f53dbc033ae.exe windows x86
Password: threatbook
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 760KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 383KB - Virtual size: 384KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ