Behavioral task
behavioral1
Sample
78514467010b5e22ae25f6459049bfbd61dc6bf679b11c722e4b4e648ead1d25.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
78514467010b5e22ae25f6459049bfbd61dc6bf679b11c722e4b4e648ead1d25.exe
Resource
win10v2004-20240508-en
General
-
Target
0c7afa49b9852613b969f61e0975bb96.bin
-
Size
701KB
-
MD5
d4a8f2681bbc69d65ef02252c3c63019
-
SHA1
32898238435b2bd8a075ae745a1dd6d6c5f35eb9
-
SHA256
482a6606fee5cdba8d3b53079473904762fe40701e414a08f39e8e5f8e5817af
-
SHA512
a19101395051ac6c56035832b828d7ee62fe183829b1172c0b49ef10d50a1dfeb6e0ed7f86a8b2f3fd1f5247dd8a0b3e30cacc5be0c6fbf220ca4943aa5c959d
-
SSDEEP
12288:YBsMUAhhU7eQkiGb/Wcjjzh8P3Pz/jv7LC6pzyHDRkKzUzepYtx0qe4:EsMUhevjWEjzmP3PzLv7LPByHDiSoCqB
Malware Config
Signatures
-
resource yara_rule static1/unpack001/78514467010b5e22ae25f6459049bfbd61dc6bf679b11c722e4b4e648ead1d25.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/78514467010b5e22ae25f6459049bfbd61dc6bf679b11c722e4b4e648ead1d25.exe
Files
-
0c7afa49b9852613b969f61e0975bb96.bin.zip
Password: infected
-
78514467010b5e22ae25f6459049bfbd61dc6bf679b11c722e4b4e648ead1d25.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 693KB - Virtual size: 696KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE