Behavioral task
behavioral1
Sample
australia.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
australia.exe
Resource
win10v2004-20231020-en
General
-
Target
bfb817c87ccc0f1ef4d3919c23f95dca8d7eaeea04ba008901c567ff05bb0ca3.zip.zip
-
Size
122KB
-
MD5
64399d81b5c56cad6848b3f71e881815
-
SHA1
3af3519eacb9ab7e2ecf0ca8fcaf2ae71d05a720
-
SHA256
c93f831cd4486383db8b13a2474fb7e2f16b7c9e241cd63c135b50b92359257e
-
SHA512
4c576685de15c43929875399eb438e381e7901369272e08c8d2e58a26639c16fbfb987fb1337c69b3a4c0eb688e67c199f82ef081ad213bb8b41c3f7e349d30c
-
SSDEEP
3072:Y7pD5NM9R8QL1sNvoiDN7spcoulJR+5swLiy9S:i15K9Rf0BRo+oulvysso
Malware Config
Signatures
-
resource yara_rule static1/unpack002/australia.exe aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/australia.exe
Files
-
bfb817c87ccc0f1ef4d3919c23f95dca8d7eaeea04ba008901c567ff05bb0ca3.zip.zip.zip
Password: infected
-
bfb817c87ccc0f1ef4d3919c23f95dca8d7eaeea04ba008901c567ff05bb0ca3.zip.zip
-
australia.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 112KB - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE