Behavioral task
behavioral1
Sample
ade7ff4a6290971c5e6f5cc6cf4020f66db4c8f08ed6d44a36cba1d61bf352c4.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
ade7ff4a6290971c5e6f5cc6cf4020f66db4c8f08ed6d44a36cba1d61bf352c4.exe
Resource
win10v2004-20240802-en
General
-
Target
132cb6ccbe20c89fc7216b7072bfb33f.zip
-
Size
2.5MB
-
MD5
ff9c5b2579fdf84b134fb4dd65c56659
-
SHA1
63729ef802cd84307cefc2c0be33407862b45118
-
SHA256
de541b7889d8c2dca83d44fa504247bbd553faad04ac357ff22c73d1d3a5b0db
-
SHA512
5868d933ef72edd420661924d0e3eb91c6ded1d86339f33b174e9f9471b0e9b36ebd54777d10af795dc52a81e7e9ac27c3cebbf271a4fafcf2925cc2fb2919b5
-
SSDEEP
49152:kgspKaiv15SoNEWslgZkPKuuhXxK0OWdxyNxG8zMc2dohfGsP7LYd:DwKamZygiPm/K0OT2fG1DY
Malware Config
Signatures
-
resource yara_rule static1/unpack001/ade7ff4a6290971c5e6f5cc6cf4020f66db4c8f08ed6d44a36cba1d61bf352c4 upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ade7ff4a6290971c5e6f5cc6cf4020f66db4c8f08ed6d44a36cba1d61bf352c4
Files
-
132cb6ccbe20c89fc7216b7072bfb33f.zip.zip
Password: infected
-
ade7ff4a6290971c5e6f5cc6cf4020f66db4c8f08ed6d44a36cba1d61bf352c4.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 83KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE