Behavioral task
behavioral1
Sample
5225d9f8fde5e11240a7035a6988b7ee3ffca419eea8ca473e845ba0502bad3b.exe
Resource
win7-20240221-en
General
-
Target
337d48261da1a0b48edd2c66991d1ac2.bin
-
Size
6.1MB
-
MD5
4bb5c2efc4301d3a4dadcba441cf76bc
-
SHA1
044bd6cd5de03bc835b6423e06b1353b6f588dff
-
SHA256
27d5d9978ea97ca23cf5c2a3dd5be5ec32e0fa10596caae3d888de8fd7e328fb
-
SHA512
40c39ac5b17298e89fe5bb75a36b68478f6b6e2b66dd106aeff451804b113912eee40b492106a0a70eb4962dae5904768be7728b1c5e5c9d0ad71cffb42097a7
-
SSDEEP
98304:YUYkQBt8Km/IIRc9zAYVJCUTOP3ufaV5iEWR6H5YpcNPz/9P+Qhn7J0koY:FQBzOIacLs4OP3P5AR6HoY9/JJ
Malware Config
Signatures
-
Processes:
resource yara_rule static1/unpack001/5225d9f8fde5e11240a7035a6988b7ee3ffca419eea8ca473e845ba0502bad3b.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack001/5225d9f8fde5e11240a7035a6988b7ee3ffca419eea8ca473e845ba0502bad3b.exe
Files
-
337d48261da1a0b48edd2c66991d1ac2.bin.zip
Password: infected
-
5225d9f8fde5e11240a7035a6988b7ee3ffca419eea8ca473e845ba0502bad3b.exe.exe windows:5 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 13.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 6.1MB - Virtual size: 6.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE