Behavioral task
behavioral1
Sample
34147dab66ccaa20cf1c6f4d5f821622eac67cd569b5bdcd2746862ec7eee26d.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
34147dab66ccaa20cf1c6f4d5f821622eac67cd569b5bdcd2746862ec7eee26d.exe
Resource
win10v2004-20230915-en
General
-
Target
34147dab66ccaa20cf1c6f4d5f821622eac67cd569b5bdcd2746862ec7eee26d.exe.zip
-
Size
468KB
-
MD5
af5583e4c10b677a88795a0c19db5fcc
-
SHA1
a3ff947e8698f6a60435edd351d51b02bf9042d3
-
SHA256
0cb3a97f9f5c36fbf21a439dc8ea3257148bc8e9f8ab71f8096ed589a4ef9fd7
-
SHA512
c46010e5d2c1ef07c1e541552e7358c797af5cabe12afa4a12435efa8d2bb8fbb6ed90a4c0fe6bdcdfe392991041b735fc3305d0bfaf823e46c5968df749d55d
-
SSDEEP
6144:mFHsAChao1ejacEBX1ckpjeCHE0kpVxwmmqhE7TzsR5kgJIUlGf45n03p9kzW0Hm:UsH1ek5im6Ck0kbIsEVgCxgNzW0i8Pxq
Malware Config
Signatures
-
resource yara_rule static1/unpack001/34147dab66ccaa20cf1c6f4d5f821622eac67cd569b5bdcd2746862ec7eee26d.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/34147dab66ccaa20cf1c6f4d5f821622eac67cd569b5bdcd2746862ec7eee26d.exe
Files
-
34147dab66ccaa20cf1c6f4d5f821622eac67cd569b5bdcd2746862ec7eee26d.exe.zip.zip
Password: infected
-
34147dab66ccaa20cf1c6f4d5f821622eac67cd569b5bdcd2746862ec7eee26d.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 696KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 373KB - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE