Behavioral task
behavioral1
Sample
054fdaea5b692f3093314551b463cc196fec47007c58eef812b2f8bde8960f91.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
054fdaea5b692f3093314551b463cc196fec47007c58eef812b2f8bde8960f91.exe
Resource
win10v2004-20231023-en
General
-
Target
054fdaea5b692f3093314551b463cc196fec47007c58eef812b2f8bde8960f91.exe.zip
-
Size
232KB
-
MD5
12099911dfca65fa8827a80aa8aef83f
-
SHA1
d84e98b7eeb9e7cda5461c483dc90e69d8505189
-
SHA256
61c80918217b456414c3f5e204fbb96ebf962d6a55f78577e305454d48bdb5d2
-
SHA512
b894f1c141817cebc7ef304968ee3a10b1715ce0c9f5bbd59f9a758c8281a3653491b3c95a4b9955101f093de22a089f896e3a29855190f5fd06dab726e760fa
-
SSDEEP
6144:VWYUxz7pAKYSSKPJPoLEos5AYvhdjHCh8UwV:VWhNaKHSQv5bvhBHCuUwV
Malware Config
Signatures
-
resource yara_rule static1/unpack001/054fdaea5b692f3093314551b463cc196fec47007c58eef812b2f8bde8960f91.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/054fdaea5b692f3093314551b463cc196fec47007c58eef812b2f8bde8960f91.exe
Files
-
054fdaea5b692f3093314551b463cc196fec47007c58eef812b2f8bde8960f91.exe.zip.zip
Password: infected
-
054fdaea5b692f3093314551b463cc196fec47007c58eef812b2f8bde8960f91.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 344KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 233KB - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE