Behavioral task
behavioral1
Sample
f6bb618f6cba8305ca5b0e4f94963eccd778aa62c33f581bac0539a14ae4a323.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
f6bb618f6cba8305ca5b0e4f94963eccd778aa62c33f581bac0539a14ae4a323.exe
Resource
win10v2004-20230220-en
General
-
Target
fc371a9c433ebbfa20d786b3c16fe3a9.bin
-
Size
412KB
-
MD5
e0bd453665fd9ef38e5a099385e2a884
-
SHA1
c1f0b5f2d011d831a13c57e6aa1216f4108f7586
-
SHA256
83601560d0daa0540bd551dc6eef0f5245cf9d5810bfbc5387b0c667635e008c
-
SHA512
34ebd237f139964449f49ac69c2d296f0980e4796565c071e1efa65877cd0cdca7876a7c1174dc6eff5cced063f517293e8648e8f2a63429a7c442fd9ba7f801
-
SSDEEP
6144:tM9ELAvJrdQTV61djUCSB9W5JqSgT/Rnfqvy1mzyIu9pDO2fPkN1j/6/4u0nV11G:eE0vHOV6rg/BQ5zgDdwyIe934ANAn/O
Malware Config
Signatures
-
resource yara_rule static1/unpack001/f6bb618f6cba8305ca5b0e4f94963eccd778aa62c33f581bac0539a14ae4a323.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/f6bb618f6cba8305ca5b0e4f94963eccd778aa62c33f581bac0539a14ae4a323.exe
Files
-
fc371a9c433ebbfa20d786b3c16fe3a9.bin.zip
Password: infected
-
f6bb618f6cba8305ca5b0e4f94963eccd778aa62c33f581bac0539a14ae4a323.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 620KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 412KB - Virtual size: 412KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE