Behavioral task
behavioral1
Sample
5d0fae797673f86aeadd054d87422284307737aa3adaba32c6d66b5fa5006a4c.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
5d0fae797673f86aeadd054d87422284307737aa3adaba32c6d66b5fa5006a4c.exe
Resource
win10v2004-20230703-en
General
-
Target
9adac0c7de9e0807c83dcb32ca7a3599.bin
-
Size
30KB
-
MD5
64a2f0ea3461d8277b9c77e857abfb82
-
SHA1
f7ac8cb7892a780ced3f6a493f7141a7ecc99d4d
-
SHA256
94b94a310e386681ae6f4ff4cbcc4cc28030ac8349b48f3ba4e759f0511cc3a9
-
SHA512
4a3fab36646b3f8df5297874a71b83f0ee29ed74b8440a6c7880458d94e8a2e00141cd415c8ecb21887d4e7f4702a1abb2736af504a8827f062b6800694a6a9b
-
SSDEEP
768:6IVjnOXiXo8aYQNz78CRUmu9tk49mxVwbJTdAA9MUtkl:DOgKzoHmu0bnwbJz9jtS
Malware Config
Signatures
-
resource yara_rule static1/unpack001/5d0fae797673f86aeadd054d87422284307737aa3adaba32c6d66b5fa5006a4c.bin upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/5d0fae797673f86aeadd054d87422284307737aa3adaba32c6d66b5fa5006a4c.bin
Files
-
9adac0c7de9e0807c83dcb32ca7a3599.bin.zip
Password: infected
-
5d0fae797673f86aeadd054d87422284307737aa3adaba32c6d66b5fa5006a4c.bin.exe windows x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 20KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE