Behavioral task
behavioral1
Sample
81b7a88094afc7849af4f05d933cf46a5f8ab7ef913c74b320b5153e3cfa08b5.exe
Resource
win7-20240704-en
General
-
Target
10e9080ff7928e7523aca1bb769c6f9b.bin
-
Size
34KB
-
MD5
70ba3ad14f5bbed97fa19b6dfb8ee171
-
SHA1
44d0316d9efe54038dad7e699812a674f542060d
-
SHA256
74a53159f4b5268b2f8a4b9d2cc7a459bd7ae799efef4aae776252944619ae5a
-
SHA512
1301c4169299f9c5d37a6e2b56d27fe226053cff3e029b335be1fc9f46d9d9d9337844d042184f17d6e66f07e0b867239d8ba7a722720d381bdb2b829f65a402
-
SSDEEP
768:WsBWwulpndCrpF8u4q8C+2jRud07CXzlAtqZCLPm5NVeCZHvd:3q449RcSjleNLPm5xPd
Malware Config
Signatures
-
resource yara_rule static1/unpack001/81b7a88094afc7849af4f05d933cf46a5f8ab7ef913c74b320b5153e3cfa08b5.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/81b7a88094afc7849af4f05d933cf46a5f8ab7ef913c74b320b5153e3cfa08b5.exe
Files
-
10e9080ff7928e7523aca1bb769c6f9b.bin.zip
Password: infected
-
81b7a88094afc7849af4f05d933cf46a5f8ab7ef913c74b320b5153e3cfa08b5.exe.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE