Behavioral task
behavioral1
Sample
a43cb57cc9f4baaa133e0dbf73cf25f4cf830ff0b59d696e46a5bc06a93eb31d.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
a43cb57cc9f4baaa133e0dbf73cf25f4cf830ff0b59d696e46a5bc06a93eb31d.exe
Resource
win10v2004-20230703-en
General
-
Target
93e7ed7d61043a8ba8782a0e4b8d6638.bin
-
Size
18KB
-
MD5
488db290f74439915d56e711695d8391
-
SHA1
bd8c76297949f5ca1cb5c70d9c61a3fe71a23b8d
-
SHA256
39eedaf4025c548e23132c3998bea373464203c22afed1d31dc1d9ff24a4bbb2
-
SHA512
2cebca011cbb3afa3d84d945c63d233d2743c49b33476a2ffac9d533a12c4831715fe28e09052c5029dcbacfb251cbf82fde29d77edfaf062ff0fa2b5e2b1c2b
-
SSDEEP
384:WIW8t1YInJ1y95ZkMoO9la5HvU6SMc7GqBd7kNWuYfilR:JdG+3y9FodUE4ZrHjfI
Malware Config
Signatures
-
resource yara_rule static1/unpack001/a43cb57cc9f4baaa133e0dbf73cf25f4cf830ff0b59d696e46a5bc06a93eb31d.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/a43cb57cc9f4baaa133e0dbf73cf25f4cf830ff0b59d696e46a5bc06a93eb31d.exe
Files
-
93e7ed7d61043a8ba8782a0e4b8d6638.bin.zip
Password: infected
-
a43cb57cc9f4baaa133e0dbf73cf25f4cf830ff0b59d696e46a5bc06a93eb31d.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE