Behavioral task
behavioral1
Sample
b608ee9a91f7b3dba7945a73967e801147359901c458f1727a4aced0f0d12f33.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
b608ee9a91f7b3dba7945a73967e801147359901c458f1727a4aced0f0d12f33.exe
Resource
win10v2004-20231020-en
General
-
Target
b608ee9a91f7b3dba7945a73967e801147359901c458f1727a4aced0f0d12f33.exe.zip
-
Size
654KB
-
MD5
f9afd4b8053506ddf8e659bfcb9cbe2e
-
SHA1
ebe51af27f20ed795f8b3757d68f6d97fbc751b0
-
SHA256
5c824f388ee870e7d323ec2195ceeb800ef156326762ce2f626a7a7693b91d48
-
SHA512
d35a9ab53c4820d7f5feeb6794638904e8b052b44d0568c831bd04a25aaf814107a934c36131614aff2a36eef37069446a2ae6125af98059172476af86d85b21
-
SSDEEP
12288:wYE40GGjHJfwZKdiUa/YUEUtQ8f0KhQLw+Ih+VHvMRDM+O7LbfRhq3VuBYe/ne9Y:lE40GGDJfwZKd77US8f0bw+IhePIO73/
Malware Config
Signatures
-
resource yara_rule static1/unpack001/b608ee9a91f7b3dba7945a73967e801147359901c458f1727a4aced0f0d12f33.exe upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/b608ee9a91f7b3dba7945a73967e801147359901c458f1727a4aced0f0d12f33.exe unpack002/out.upx
Files
-
b608ee9a91f7b3dba7945a73967e801147359901c458f1727a4aced0f0d12f33.exe.zip.zip
Password: infected
-
b608ee9a91f7b3dba7945a73967e801147359901c458f1727a4aced0f0d12f33.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 633KB - Virtual size: 636KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 292KB - Virtual size: 291KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 232KB - Virtual size: 230KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ