Behavioral task
behavioral1
Sample
Zopa.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
Zopa.exe
Resource
win10v2004-20240226-en
General
-
Target
Zopa.exe
-
Size
367KB
-
MD5
4312fc1e1e3de4b540e76d7867ef6a20
-
SHA1
e1bf939c3fbdec3c216b5a64bd1021590257ea96
-
SHA256
ba5ac5c166eb578e235d14d00e428f9d7e81b8a9d05d33bafeb54aa577ee2033
-
SHA512
0370d1c1d0d0b3adbb59270d97290058ad61d05dee26a4edab91f9acaa8a67540c3a51c779892e6300abbb91e0ac921fb75343ea5dd3387deabb1b2deab388fc
-
SSDEEP
6144:ZjyGJlM1Ub7BIOI0Bm+fP3dOaNdwrrh/ybylnoda52Kzc3m8ejFDqoS:ZmONm+XtOa2jO6UexDqoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Zopa.exe
Files
-
Zopa.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 364KB - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE