Behavioral task
behavioral1
Sample
3830c48c32650ea0dc476491345f474d23987b52a1c94a86a23f1befb383504f.exe
Resource
win7-20230220-en
General
-
Target
bd6d3467028a2a484f63c50a96496789.bin
-
Size
4.3MB
-
MD5
04f02ba5e01ab72ff09ccb29e86621d1
-
SHA1
07a31c354a82a7d69245874f24e82bd613627e19
-
SHA256
58dd65fe54f34ace8fc96c301bb603a5d734b1f4405a672d8208592f970d8fb6
-
SHA512
18dd058cc53222f4df6dd13e5a8d103dd30b390d311347417372d9c1321d03522576f6ccfbfee452c5ec7c583d11e5412bc4da25bcc7f788f0e7cf8d06541744
-
SSDEEP
98304:9bzISA4HAfnmO2T8qhB1cHuDKxx2SnAgwMi/uONAIp6:9K4HAuOU8qhfKQK5nI8
Malware Config
Signatures
-
resource yara_rule static1/unpack001/3830c48c32650ea0dc476491345f474d23987b52a1c94a86a23f1befb383504f.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/3830c48c32650ea0dc476491345f474d23987b52a1c94a86a23f1befb383504f.exe
Files
-
bd6d3467028a2a484f63c50a96496789.bin.zip
Password: infected
-
3830c48c32650ea0dc476491345f474d23987b52a1c94a86a23f1befb383504f.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 10.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.3MB - Virtual size: 4.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE