Behavioral task
behavioral1
Sample
md5crack.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
md5crack.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
test.bat
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
test.bat
Resource
win10v2004-20240226-en
General
-
Target
aba8d963bb9a9be35e55a9c48656627a
-
Size
72KB
-
MD5
aba8d963bb9a9be35e55a9c48656627a
-
SHA1
ae95b93ab8549a69fd9258fd3a776581ea9bc64c
-
SHA256
e20bd8f721b516d8bc6f844bc2bcfad71be6eeef2e6ecf13c77afc2be24f7aa4
-
SHA512
7c530011d9deddb653edac993a2250da3aba108e6ea2047488602482e63e434733a44543cb23adc4877b61b997b3177204195e0b812dd86bb059c374d7703b94
-
SSDEEP
1536:pR9Dd1thKVgRTizxtNLIGv1Pq/kr0PTucYd6KSahgpBF3MRrfbKV:l57hWg4zxvITA6K1OiRr+V
Malware Config
Signatures
-
resource yara_rule static1/unpack001/md5crack.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/md5crack.exe
Files
-
aba8d963bb9a9be35e55a9c48656627a.zip
-
md5crack.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 108KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 70KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
readme.txt
-
test.bat
-
test.md5