Behavioral task
behavioral1
Sample
8ebbd2760508e5e72b2933510cf415438adc44d2ffc86e7ca3731921e3e52e0a.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8ebbd2760508e5e72b2933510cf415438adc44d2ffc86e7ca3731921e3e52e0a.exe
Resource
win10v2004-20240802-en
General
-
Target
2563ade594e1a7ea13fd786c6c3c8824.zip
-
Size
93KB
-
MD5
f52f4798c579f8f69785540360970868
-
SHA1
061282cb17c7ac67c2dd0e826930b035671c82e6
-
SHA256
1b13ada0688763cf98b4777470ed464821a3b8dd7f58e904dbf283595f28d155
-
SHA512
30034b2b1e5a3da05c04dbbd3242c23eec52a9fb4e03772733e9b79f2a54594f26ab92de93f91d74ca3cd768c90656d4388cb947cda041d9272c8d89a6b9e3de
-
SSDEEP
1536:3ziGrtJeb225Gj+w4y35jPfBpAVsHnaFkNkkCKLsQgVc/zeFw84Mimu:3NrMGj+wZ3XpAVs4PP/Qg+/J8piP
Malware Config
Signatures
-
resource yara_rule static1/unpack001/8ebbd2760508e5e72b2933510cf415438adc44d2ffc86e7ca3731921e3e52e0a upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/8ebbd2760508e5e72b2933510cf415438adc44d2ffc86e7ca3731921e3e52e0a
Files
-
2563ade594e1a7ea13fd786c6c3c8824.zip.zip
Password: infected
-
8ebbd2760508e5e72b2933510cf415438adc44d2ffc86e7ca3731921e3e52e0a.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 83KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE