Behavioral task
behavioral1
Sample
9f94daaec163d60c74fff0f0294942525be7b5beaf26199da91e7be86224ceeb.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9f94daaec163d60c74fff0f0294942525be7b5beaf26199da91e7be86224ceeb.exe
Resource
win10v2004-20231215-en
General
-
Target
38dbe26818d84ca04295d639f179029c.bin
-
Size
385KB
-
MD5
0348f85c1249e03bd1451e7d0630acf3
-
SHA1
7fa8bfff902dc5665fb2e2bc6567be4d1665b3d9
-
SHA256
0cc1fb127296eaf81e6affc6559a87f30083ce68bdc9485d8f009ef1347bb28d
-
SHA512
70218276e011416c68696a46068e6d00f2967e27c2c77067059781448b2839e0283d9764c4683de0cd6983aef30e7d0f186d775b30b6581dd5e652e57b54fde2
-
SSDEEP
12288:ZCRwke8g8CWrLVYtRh1FPvjbrr4Ran6/btj:0RwF8gautn1Fnjr4Ra6h
Malware Config
Signatures
-
resource yara_rule static1/unpack001/9f94daaec163d60c74fff0f0294942525be7b5beaf26199da91e7be86224ceeb.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/9f94daaec163d60c74fff0f0294942525be7b5beaf26199da91e7be86224ceeb.exe
Files
-
38dbe26818d84ca04295d639f179029c.bin.zip
Password: infected
-
9f94daaec163d60c74fff0f0294942525be7b5beaf26199da91e7be86224ceeb.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 720KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 375KB - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE