Behavioral task
behavioral1
Sample
2024-04-14 19-20-46.scr
Resource
win7-20240221-en
General
-
Target
2024-04-14 19-20-46.rar
-
Size
84.4MB
-
MD5
6b8ab29424d2b87535c05937d0868fbc
-
SHA1
a5876d0cce84022f4b6adc9fdce0251a272b9f14
-
SHA256
97527bdcbbc8918d0d718cc9b3c34b532479e4c4d1d490f5f71f075a679bebe5
-
SHA512
a4aa4bf74f93496fd36464b504e4fdaefc5f030fb6bf92f9fcacd83e2cf02966f5d04ba2c7a5f6933322778ffbd3deb7aaf7c14358cdbf5fd8ece157152f33f0
-
SSDEEP
1572864:4xLoIv4hWEJyD80UGJPqwaLSCYN0FatdmxXFFuC7oqy9p9GLkyDuq0sGfc+hv:DIv48Eco4PqTTYN00AfuC7oqCbGLZDnw
Malware Config
Signatures
-
resource yara_rule static1/unpack001/2024-04-14 19-20-46.scr upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/2024-04-14 19-20-46.scr
Files
-
2024-04-14 19-20-46.rar.rar
-
2024-04-14 19-20-46.scr.exe windows:5 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 228KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 127KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 61KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
�d<.pyc