Behavioral task
behavioral1
Sample
2e54ec22a0d7931509bb5905acf51ac1f223d5bca7a46b9f9038291d7c80c6c9.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
2e54ec22a0d7931509bb5905acf51ac1f223d5bca7a46b9f9038291d7c80c6c9.exe
Resource
win10v2004-20230703-en
General
-
Target
sample1.zip
-
Size
323KB
-
MD5
89d4fd1f10970c85640a161343342357
-
SHA1
319315b813421619f67580bb96d1efb2f616ccad
-
SHA256
c2cad1f5ba296bbcb5aae0aea849e7c51bf775c6ed5f4d149a8f1b81d68a8ff0
-
SHA512
807991a97592b931a1517442586be109c7413ffd8a1bad0656549124b825f40442fb05a8f4294d793a4c020697883b44a6402cd47bc39406f6369dfa74e3db36
-
SSDEEP
6144:C+wrM9TPYNHbavKojqukQgXNMkrgb8FV7xJnY+wEDx/7MjqJsMpCE90kv1Ev:C+nPYNHmvKdutgXNMkrySVF+EtjHdw
Malware Config
Signatures
-
resource yara_rule static1/unpack001/2e54ec22a0d7931509bb5905acf51ac1f223d5bca7a46b9f9038291d7c80c6c9.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/2e54ec22a0d7931509bb5905acf51ac1f223d5bca7a46b9f9038291d7c80c6c9.exe
Files
-
sample1.zip.zip
Password: infected
-
2e54ec22a0d7931509bb5905acf51ac1f223d5bca7a46b9f9038291d7c80c6c9.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 520KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 315KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE