Behavioral task
behavioral1
Sample
4c75f91c9974d712ef96b2f6bfe99edc15f110dea80065a59e161e639d08e74d.exe
Resource
win7-20240221-en
General
-
Target
35d96e814e23a027296c884971a872cb909b1436ad780d4853798a2b280d083e
-
Size
148KB
-
MD5
d41c509b1adc28d646200ad737126dbd
-
SHA1
e8bfbad3d4ed05e8f5962a4fed709515ad0c1f72
-
SHA256
35d96e814e23a027296c884971a872cb909b1436ad780d4853798a2b280d083e
-
SHA512
3048079e32fd47452cd016774cea379273bb2f1fec083b98d2d65f3dd0e91d33b2face694c074bb062ae2dfb759e1cd95ab49a8294a94cc04c770d4b5e58383d
-
SSDEEP
3072:X0K+9X1GLtWZ0zuPeF1a7Y5NjTOxRQJjXeInOx+QAFRPp/CGCrz:X3++LtW1PCa7YvjiMJjHq+QAFRRpCrz
Malware Config
Signatures
-
resource yara_rule static1/unpack001/4c75f91c9974d712ef96b2f6bfe99edc15f110dea80065a59e161e639d08e74d.exe upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/4c75f91c9974d712ef96b2f6bfe99edc15f110dea80065a59e161e639d08e74d.exe unpack002/out.upx
Files
-
35d96e814e23a027296c884971a872cb909b1436ad780d4853798a2b280d083e.zip
Password: infected
-
4c75f91c9974d712ef96b2f6bfe99edc15f110dea80065a59e161e639d08e74d.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 188KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 79KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 44KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 204KB - Virtual size: 203KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ