Behavioral task
behavioral1
Sample
69e52d34f49684264d760cf98a98244b89619a62b28bf6a35f5ff93b4c90ee90.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
69e52d34f49684264d760cf98a98244b89619a62b28bf6a35f5ff93b4c90ee90.exe
Resource
win10v2004-20230220-en
General
-
Target
b19cb7724c0be19001aef738f37f1e94.bin
-
Size
14KB
-
MD5
ac4168e00d31f5bda3d7b5d77bcef3fb
-
SHA1
ac2e50462d9f663cdc210d298c95180839b2231b
-
SHA256
1b858b3effc7b34f0b10b810f7924fa2beddd8b0aa3cf56c401b3269608dce80
-
SHA512
1a0c84a85d1a33ca810051fafebb697595f516414b5a8551c07fb1d7b34289a6269ead1e42e3bfbf8307d0cdd5d3cba5fff395e5bfddb4c8074477d80d021ddb
-
SSDEEP
384:WSga7/vpnGq8vVPWIPhS/l6a7IsduQ81QjRs9Uq4Z7zo3ZSsM4DxN:175GvVPWqS/wyUQjEUqa7eq4FN
Malware Config
Signatures
-
resource yara_rule static1/unpack001/69e52d34f49684264d760cf98a98244b89619a62b28bf6a35f5ff93b4c90ee90.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/69e52d34f49684264d760cf98a98244b89619a62b28bf6a35f5ff93b4c90ee90.exe
Files
-
b19cb7724c0be19001aef738f37f1e94.bin.zip
Password: infected
-
69e52d34f49684264d760cf98a98244b89619a62b28bf6a35f5ff93b4c90ee90.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX3 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ