Behavioral task
behavioral1
Sample
911f82f90fd79341fba7783708ed09b30c22c09fce7f56670a7410ef5dc9df06.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
911f82f90fd79341fba7783708ed09b30c22c09fce7f56670a7410ef5dc9df06.exe
Resource
win10v2004-20230220-en
General
-
Target
d2a32f402538f6c4620e5c16a2e1c470.bin
-
Size
14KB
-
MD5
db8ae77340e8e8a4e4bf25c457cd9329
-
SHA1
d51db169e1479ec9166d25db86b6be9a219a7f74
-
SHA256
3fc0b1ff30ae39b0ea746a359c5357be1c974edb63a0cf948c6cbfa4c8666746
-
SHA512
3dae2ec9e5d8e4b514c85995bd9c3f1bb1009b95d5ba05b7c09ae6bfc540d5a91484ce590158423ce607d9c5715f7f575604d0d92128ba63ed473152e15bb243
-
SSDEEP
384:txMdF1HSFyuNtAr4xFXdZMzSfFpNlP08FKr1fQ4P2VUYZH1krr8v:txMdF1HSFNNbxLiC3PtF+b9+H1c8v
Malware Config
Signatures
-
resource yara_rule static1/unpack001/911f82f90fd79341fba7783708ed09b30c22c09fce7f56670a7410ef5dc9df06.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/911f82f90fd79341fba7783708ed09b30c22c09fce7f56670a7410ef5dc9df06.exe
Files
-
d2a32f402538f6c4620e5c16a2e1c470.bin.zip
Password: infected
-
911f82f90fd79341fba7783708ed09b30c22c09fce7f56670a7410ef5dc9df06.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX3 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ