Behavioral task
behavioral1
Sample
c9908d61385883484ba8471fbf808eb2d9e8260ef1836085718a5783237d6303.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
c9908d61385883484ba8471fbf808eb2d9e8260ef1836085718a5783237d6303.exe
Resource
win10v2004-20230831-en
General
-
Target
11671666296.zip
-
Size
2.7MB
-
MD5
f16186e7f856c98a8d5e23c7a21853d0
-
SHA1
f6008bcb0ed9d6efe7ff1ecc44cc9c01187eb27d
-
SHA256
15abedd5e4c6504092f2502bb05fa21d3bbd588c4f428484e9d419467b3490aa
-
SHA512
ef3de240390a3d7ddb32d4021e97bcc063d720280c4e64159974a4a011b75d89e4d21e519c2089aa2ed26f0c682e1934d51bf6b84c8b5fa40ea72ced021ccad8
-
SSDEEP
49152:6SVe5PAueJQf9Bi0kPGLoqx3bW4sUHmXxi4nQaun+RgIxepCug9sP:PVe5PiJQi9PUlJHmBXQaunklxSCugY
Malware Config
Signatures
-
resource yara_rule static1/unpack001/c9908d61385883484ba8471fbf808eb2d9e8260ef1836085718a5783237d6303 upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/c9908d61385883484ba8471fbf808eb2d9e8260ef1836085718a5783237d6303
Files
-
11671666296.zip.zip
Password: infected
-
c9908d61385883484ba8471fbf808eb2d9e8260ef1836085718a5783237d6303.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 304KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE