Behavioral task
behavioral1
Sample
86460d61672299649a17620ddf45f5b82931c2e4.exe
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
86460d61672299649a17620ddf45f5b82931c2e4.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-08-08-09-06.zip
-
Size
635KB
-
MD5
209bcb82465e64f56c3b845c63221aa4
-
SHA1
442a5629128b0edad0a64e2d43353d4b5d7b6f55
-
SHA256
180f5e7c9bae3c57c5c7df989b76a8a3f525711aefbe0c008582e6698343bed7
-
SHA512
c665039457ec3028d322be7a14f31353bc93856160e27a5e3074b90bb15bb49f01314dba23580d0a51e3abe4758f504ee69bce31e79419e552e592a90d21c737
-
SSDEEP
12288:AKrq3rJcTQdISVH8Zx9SjpDUPgjFryzH/o+8vbZlIYNHpC1VFVCCqXjnB+sR7:pqVVdIS9avSjqPky7ABv7NHpC1L0C8Bf
Malware Config
Signatures
-
resource yara_rule static1/unpack001/86460d61672299649a17620ddf45f5b82931c2e4 upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/86460d61672299649a17620ddf45f5b82931c2e4
Files
-
2024-08-08-09-06.zip.zip
Password: virus
-
86460d61672299649a17620ddf45f5b82931c2e4.exe windows:6 windows x64 arch:x64
Password: virus
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 3.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 651KB - Virtual size: 652KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE