Behavioral task
behavioral1
Sample
dedae00204eb3310c20b0249daf1b109131ab8924c04545560976364545c7e6a.exe
Resource
win7-20230703-en
General
-
Target
3775b15a3832ec38ae1a26b2c8e9fbbc.bin
-
Size
4.3MB
-
MD5
7d0daf82144c3b59d500d134ff5fdec7
-
SHA1
db64cd6c2cf19e50f663d8621c37c3c2d7d649cc
-
SHA256
5594faee65c248c3ac9ce2a5db27c0fbaa5c367af312b1662b7a0c8b48ecbe38
-
SHA512
302a4ef623ddea03059ecdab25a385a7fe2b05aac54998e66bf4289f8a896389deb11da77dcddf25a41d47a4bacac31946eaed4e8a27192cde7555acb3e22a62
-
SSDEEP
98304:INebyREvvhj0gikk9L3OceEf1eKcoMA8Ys75m16smV2IBe0SiWGnO/eU:IN+hoCoL3Oc7f0+/8Ny6sGBAeU
Malware Config
Signatures
-
resource yara_rule static1/unpack001/dedae00204eb3310c20b0249daf1b109131ab8924c04545560976364545c7e6a.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/dedae00204eb3310c20b0249daf1b109131ab8924c04545560976364545c7e6a.exe
Files
-
3775b15a3832ec38ae1a26b2c8e9fbbc.bin.zip
Password: infected
-
dedae00204eb3310c20b0249daf1b109131ab8924c04545560976364545c7e6a.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 10.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.3MB - Virtual size: 4.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE