Behavioral task
behavioral1
Sample
a7395220524deefe2161e5c9fdbe8cd5a151171a180c9df0f9f9400c39438311.exe
Resource
win7-20240708-en
General
-
Target
8ead2c95f7d0ddfa2080fc1308dd91c9.zip
-
Size
32KB
-
MD5
6be63d6a43626b6010536f811fbc7f8b
-
SHA1
9e855135a2a3beab6b67bce3262bc9ec048cfd6d
-
SHA256
095a3a72f78a1dd7f9ca428da801df8f5b3037a6d39d05e07af04c015563e328
-
SHA512
f68e169badcdcdb0e4a7e1340d3ea7f3537eb437734c7dff0a07fba229879c39d4b4010a46a57180b0e180e2b741d1f29a4d3e3e7cefe5e98046e7ebc7d559bf
-
SSDEEP
768:/TF54KaifCVVRleEo6iTRqzs/c/bqsVSosnet2DBSZ:/TpO3RleEopdqQUX8neUwZ
Malware Config
Signatures
-
resource yara_rule static1/unpack001/a7395220524deefe2161e5c9fdbe8cd5a151171a180c9df0f9f9400c39438311 upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/a7395220524deefe2161e5c9fdbe8cd5a151171a180c9df0f9f9400c39438311 unpack002/out.upx
Files
-
8ead2c95f7d0ddfa2080fc1308dd91c9.zip.zip
Password: infected
-
a7395220524deefe2161e5c9fdbe8cd5a151171a180c9df0f9f9400c39438311.exe windows:4 windows x86 arch:x86
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.WavfW Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ