Behavioral task
behavioral1
Sample
79dc8da8c5f7b41a0eed67e10e5239355be1c6e089738138dfa3b753fe019355.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
79dc8da8c5f7b41a0eed67e10e5239355be1c6e089738138dfa3b753fe019355.exe
Resource
win10v2004-20231215-en
General
-
Target
91493a9a9e83a7b48d178ae10f97028d.bin
-
Size
46KB
-
MD5
812e02a5f8738ad0d46ea22ac3bef24f
-
SHA1
d4f0a44bf151e63235cf2fd1aa23bcdf014846a9
-
SHA256
430e3cc6a72b4fddaadfbed29c6855d2a807528719ffd7e755195a951f7b333a
-
SHA512
9075f85e858742ad22f57a5667fba4665ed2b4337516160cd2495ed99e5ffcf452b852326ce69370ad45799bc2e8dd6497aa6e388222d9765a9e00f8b7946295
-
SSDEEP
768:fgQvkN5aplq4QkKRUqD/3SZMFjgxfQ/fdyoJgh6i0L2J5ZGQdY7+l/0WGCUR2pXx:fZMN5YlnQbRUy3SZ4jyQtyoJe652J5IM
Malware Config
Signatures
-
resource yara_rule static1/unpack001/79dc8da8c5f7b41a0eed67e10e5239355be1c6e089738138dfa3b753fe019355.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/79dc8da8c5f7b41a0eed67e10e5239355be1c6e089738138dfa3b753fe019355.exe
Files
-
91493a9a9e83a7b48d178ae10f97028d.bin.zip
Password: infected
-
79dc8da8c5f7b41a0eed67e10e5239355be1c6e089738138dfa3b753fe019355.exe.exe windows:4 windows x86 arch:x86
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 61KB - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE