Behavioral task
behavioral1
Sample
9c8b1aecaf1bdded80bec98ec5ab5b9b9754cbce9439dd9eacc7d1774d1438f8.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
9c8b1aecaf1bdded80bec98ec5ab5b9b9754cbce9439dd9eacc7d1774d1438f8.exe
Resource
win10v2004-20230220-en
General
-
Target
7ce7d260acfddf2dbc0286c1493560b2.bin
-
Size
2.8MB
-
MD5
f0b85ebcc5b4f589d6def5b1d60920c1
-
SHA1
5180b98607e99a044623acc04b733d26aae98865
-
SHA256
5d31d1870fc8502ccd6927a64dc8134bbc45abf97bb1ece8d6488e27c8f58b33
-
SHA512
14adc668a318026a08fbc42cd28aaa501054815e78b15cf28c7ba4fc1e29c4e21d05c1d81c5604ada2e8e76ca4fafa856d18c9d781522284c60f4362e3a820b8
-
SSDEEP
49152:d36a5abW+wqbKkb4w8HB7f81mDYwZUonoYvWahGJVWUkqpZeyxcsju9duzKYqwQQ:dq+abdwq+HHB7pTWsSahGJIj4ey+sqv0
Malware Config
Signatures
-
resource yara_rule static1/unpack001/9c8b1aecaf1bdded80bec98ec5ab5b9b9754cbce9439dd9eacc7d1774d1438f8.bin upx
Files
-
7ce7d260acfddf2dbc0286c1493560b2.bin.zip
Password: infected
-
9c8b1aecaf1bdded80bec98ec5ab5b9b9754cbce9439dd9eacc7d1774d1438f8.bin.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE