Behavioral task
behavioral1
Sample
calc.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
calc.exe
Resource
win10v2004-20231215-en
General
-
Target
10639e7e8e33ddc5270522aecc43c0f8
-
Size
31KB
-
MD5
10639e7e8e33ddc5270522aecc43c0f8
-
SHA1
d1c8993f663334198171036f27abb464743cefb3
-
SHA256
3eba534215aea6957294bdb73ad15e9ee2d2d43aabb02fc178addfd5ad064832
-
SHA512
eb83bf78fc2aad23828ba85909e493a9dcc276534f5a9010fc9c6a29fbdc38edc7fb289d9cc64133e5cdf03939e7a459c1758db50d968a5e8c2c93c3ec3169df
-
SSDEEP
768:3zI28LCvoPw+f+DDJnKYY9imqWbZ4dnKADu6Wf8+VhM:3zV44oPw+f+RK9/qDmVhM
Malware Config
Signatures
-
resource yara_rule static1/unpack001/calc.exe.bin upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/calc.exe.bin
Files
-
10639e7e8e33ddc5270522aecc43c0f8.lzh
-
calc.exe.bin.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE