Behavioral task
behavioral1
Sample
87c0e1bcd7a3ce697234a49972983658a7fad197d151eea9dc2a57062b964753.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
87c0e1bcd7a3ce697234a49972983658a7fad197d151eea9dc2a57062b964753.exe
Resource
win10v2004-20240704-en
General
-
Target
168ac5920bd02d928f9b3c1cf331b600.bin
-
Size
1.1MB
-
MD5
34f58f366f951d15e112c5de7c54ddc2
-
SHA1
56ba8fb11c0cfaf34bffbecac33497ef2115e71c
-
SHA256
c4534bec79c6eae8722108486b70baa8d722d031e3a55b56a8cbd57b3a9c2f6c
-
SHA512
0e74c11ea00d413757950e3659d91a50e534139a91bd87f510d03b80b0df82dd5fd0826ade8b3a75b67990f36ab40b15462b3eec2ae45d586d3668bcfcb39462
-
SSDEEP
24576:2yPN4prtgQGoilCLpEMyBtb7JM6tjl9GyPQJ2OGGx2HAts/Cn5+V384t2F:9PWttRGYvAtq+sxUdDta
Malware Config
Signatures
-
resource yara_rule static1/unpack001/87c0e1bcd7a3ce697234a49972983658a7fad197d151eea9dc2a57062b964753.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/87c0e1bcd7a3ce697234a49972983658a7fad197d151eea9dc2a57062b964753.exe
Files
-
168ac5920bd02d928f9b3c1cf331b600.bin.zip
Password: infected
-
87c0e1bcd7a3ce697234a49972983658a7fad197d151eea9dc2a57062b964753.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 10.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5.7MB - Virtual size: 5.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE