Behavioral task
behavioral1
Sample
3f08b71f3ff7e235402bdaa872638e4197542350ce68198df0006bb0dbd39ec1.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
3f08b71f3ff7e235402bdaa872638e4197542350ce68198df0006bb0dbd39ec1.exe
Resource
win10v2004-20231020-en
General
-
Target
3f08b71f3ff7e235402bdaa872638e4197542350ce68198df0006bb0dbd39ec1.exe.zip
-
Size
483KB
-
MD5
f397f9b44f0db5829671a2d7f2513c6a
-
SHA1
dd39a08d71b29df3c25562a9111d816ef2ee0b06
-
SHA256
144d6a836114c007d4bc338cc054a58c6632a98da7819b50ad99380caf29ea48
-
SHA512
00759e59c47889ab225ccc4ff1d3668f3e578cfb51899cfa902b02be6108ee094bf9ec74472884253c1912dd34669e6ba7911248934b93d99b00b7d7d980316e
-
SSDEEP
12288:bouh9NghjmLAlpUGIalRh40LJVhyofjnwUvVVTR55qmmq:boCtLAvb79Vr559
Malware Config
Signatures
-
resource yara_rule static1/unpack001/3f08b71f3ff7e235402bdaa872638e4197542350ce68198df0006bb0dbd39ec1.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/3f08b71f3ff7e235402bdaa872638e4197542350ce68198df0006bb0dbd39ec1.exe
Files
-
3f08b71f3ff7e235402bdaa872638e4197542350ce68198df0006bb0dbd39ec1.exe.zip.zip
Password: infected
-
3f08b71f3ff7e235402bdaa872638e4197542350ce68198df0006bb0dbd39ec1.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 440KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 487KB - Virtual size: 488KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE