Behavioral task
behavioral1
Sample
bb57cae4af477abbadfbab5f445d89308b1527d741ce439dcad40fce2b56c9f7.exe
Resource
win7-20240704-en
General
-
Target
252b2cc4015380b95a9c56472ac66497.zip
-
Size
32KB
-
MD5
543da17d15915e8233b78eb5f0992403
-
SHA1
3aa37da47d6b95246b43c767846e010f5b6eed6f
-
SHA256
ee06107f8c49119e738ba90b64069985ebd2116f797a4e0272390b75380bbebf
-
SHA512
70e93edf78bcdf510325434529ea8a41f74d9c987d58c4b564fe2c768a6152472b35389bd99dd692946e2e9dec5da7faa8197841606cba58ac2e35a5ca482b84
-
SSDEEP
768:c3Q4iy1XM4a7gZLB/cSlZ299oCEXXaRLiNBR74hVmMgruloqSr/:kQ4iyFB9f29nEXXaJiXR8XHU/
Malware Config
Signatures
-
resource yara_rule static1/unpack001/bb57cae4af477abbadfbab5f445d89308b1527d741ce439dcad40fce2b56c9f7 upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/bb57cae4af477abbadfbab5f445d89308b1527d741ce439dcad40fce2b56c9f7 unpack002/out.upx
Files
-
252b2cc4015380b95a9c56472ac66497.zip.zip
Password: infected
-
bb57cae4af477abbadfbab5f445d89308b1527d741ce439dcad40fce2b56c9f7.exe windows:4 windows x86 arch:x86
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.WavfW Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ