Behavioral task
behavioral1
Sample
468919d01782ed9eb196f31011ec99d9d7f608dfc64f82cf99a22ec5eb3610d8.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
468919d01782ed9eb196f31011ec99d9d7f608dfc64f82cf99a22ec5eb3610d8.exe
Resource
win10v2004-20231025-en
General
-
Target
468919d01782ed9eb196f31011ec99d9d7f608dfc64f82cf99a22ec5eb3610d8.exe.zip
-
Size
306KB
-
MD5
328561b0ccb85a9c609d3febb880f0c6
-
SHA1
50512bde290cc264c486385a96a29e088851d4f8
-
SHA256
0373a35e15cfd268b4ff0e9fab665963f3f26604fecbbef27cbd438edabc40ec
-
SHA512
6bd66140169d935132477f1793a00a37f14f0ea4588e51b49131ae8430b2462c6009deddf4ff0369175c9a26305ea18650eb3b18b62463c79a65f087e0d9d583
-
SSDEEP
6144:uL3KLaGqFzIt9D3wHMdRiIiOl4g9LIogQgAew/X+Opmt5gR3LgBIxi6o:+KLYzhHMjJL4g9PVpOeQ+3LcIxM
Malware Config
Signatures
-
resource yara_rule static1/unpack001/468919d01782ed9eb196f31011ec99d9d7f608dfc64f82cf99a22ec5eb3610d8.exe upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/468919d01782ed9eb196f31011ec99d9d7f608dfc64f82cf99a22ec5eb3610d8.exe unpack002/out.upx
Files
-
468919d01782ed9eb196f31011ec99d9d7f608dfc64f82cf99a22ec5eb3610d8.exe.zip.zip
Password: infected
-
468919d01782ed9eb196f31011ec99d9d7f608dfc64f82cf99a22ec5eb3610d8.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 368KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 308KB - Virtual size: 308KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 432KB - Virtual size: 431KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 140KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ