Behavioral task
behavioral1
Sample
4f3793376b8bde322af129c5c932c4521115293a80b5c95742a28cc9c5cbfc73.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4f3793376b8bde322af129c5c932c4521115293a80b5c95742a28cc9c5cbfc73.exe
Resource
win10v2004-20240419-en
General
-
Target
b9027aae056f656e25cfeb571ef48bc2.bin
-
Size
470KB
-
MD5
cec215d3155e5101901432e1309a0847
-
SHA1
973fd2aef2358d224128fd4d24e42e36898abdbf
-
SHA256
be5e42b7335e62683dad2cf5a3c9e6886e91b40438f4dc4a6f77159b8be40b51
-
SHA512
eb2693557bab44f771d4abe205524d9d8728d13d27ee74c4f38fa9b61099c0feb0f511e4c8f9b6b4b9603794928a2c08a26285cbaba96343e606a6789b8a7892
-
SSDEEP
12288:lon1zj0nxvfh+M9XCRJHrKp0smvDjwxnWIEScBY0bX:CnVw59ERJH+MDjwxnpEqS
Malware Config
Signatures
-
resource yara_rule static1/unpack001/4f3793376b8bde322af129c5c932c4521115293a80b5c95742a28cc9c5cbfc73.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/4f3793376b8bde322af129c5c932c4521115293a80b5c95742a28cc9c5cbfc73.exe
Files
-
b9027aae056f656e25cfeb571ef48bc2.bin.zip
Password: infected
-
4f3793376b8bde322af129c5c932c4521115293a80b5c95742a28cc9c5cbfc73.exe.exe windows:5 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 852KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 463KB - Virtual size: 464KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE