Behavioral task
behavioral1
Sample
84b33d3b0c1e396758f9591e797f5b0029be3f6a752dc2bec2dc20a85d68adda.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
84b33d3b0c1e396758f9591e797f5b0029be3f6a752dc2bec2dc20a85d68adda.exe
Resource
win10v2004-20230220-en
General
-
Target
84b33d3b0c1e396758f9591e797f5b0029be3f6a752dc2bec2dc20a85d68adda.zip
-
Size
1.7MB
-
MD5
d2c2024d0c684d2f237ae01f532346ad
-
SHA1
6acd2ed89645d5fbf59d06cb2484162b66b20076
-
SHA256
c0d98e48a6e4b8308bbee2c2e7b7cbe6c2fdf8af89242012ab97309d482702b8
-
SHA512
10eefe5c218f2b8516b0cafeb29c3d8cf674db5d54fd56bb77888300a1e81aa40eec7907f140fbf94d5b1cfce4c099b72517923afe5d8af113a69cbdc67aa31c
-
SSDEEP
49152:fIPQWgqAonyf0IKfLCjeMd+633HeHuQx8Tk:w0oW1K3I+o38uQx5
Malware Config
Signatures
-
resource yara_rule static1/unpack001/84b33d3b0c1e396758f9591e797f5b0029be3f6a752dc2bec2dc20a85d68adda upx
Files
-
84b33d3b0c1e396758f9591e797f5b0029be3f6a752dc2bec2dc20a85d68adda.zip.zip
Password: threatbook
-
84b33d3b0c1e396758f9591e797f5b0029be3f6a752dc2bec2dc20a85d68adda.exe windows x64
Password: threatbook
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 251KB - Virtual size: 402KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 948B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.symtab Size: 512B - Virtual size: 4B
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ