Behavioral task
behavioral1
Sample
47928899_9692545608_20230828_11218099.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
47928899_9692545608_20230828_11218099.exe
Resource
win10v2004-20230703-en
General
-
Target
47928899_9692545608_20230828_11218099.7z
-
Size
1.5MB
-
MD5
cb570da5668ac14bdfd2c10cc7de6ad4
-
SHA1
b00deef1fa8e6289515795969ecef5420fc69cb7
-
SHA256
5704a693482f6acdedd64c7f3b51f4bb1b84d79b29e38c55724d59a866401e12
-
SHA512
b316be4f8dcd9f9529d15eaf6701d7d950ba479240514a5c34013d90fba900d7932353ad60567d3199a4eb4ea27381cefc330737756b7ed24113fab19fe50dfd
-
SSDEEP
49152:AhAM5aCpzDiqiTjU0ypfmmuLmTAaMNRz5sq5dFW3FEOlu:AhAMYCpzDcjL03ZxMvNi9lu
Malware Config
Signatures
-
resource yara_rule static1/unpack001/47928899_9692545608_20230828_11218099.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/47928899_9692545608_20230828_11218099.exe
Files
-
47928899_9692545608_20230828_11218099.7z.7z
-
47928899_9692545608_20230828_11218099.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 4.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE