fc9104c968dd0280d5f4cbee5c6b640c.zip
- SHA256 7ffde301ad6ce88b26e5961af62877f68d9b3e228467a8794c34ff4d3b664ab1
Password
infected
Behavioral task
behavioral1
Sample
ffaea37f93399723c009ed393f0f13e29a8eabdb44a48b999c965ca853685dfe.exe
Resource
win7-20240705-en
windows7-x64
8 signatures
150 seconds
General
- Target fc9104c968dd0280d5f4cbee5c6b640c.zip
- Size 32KB
- Sample240831-pv2mlatfja
- SHA256 7ffde301ad6ce88b26e5961af62877f68d9b3e228467a8794c34ff4d3b664ab1
- MD5 101dc38d02718480537c7f919189d5a3
- SHA1 2d265935a7d919a117f0ddc2386514858c963184
- SHA512 8437aa9ba268cd10f965b325b4f4b5b7d9f81cc006621a5e946eb4975d57e2c6ce3b934677bdaa4da9e65641ce469c97dc4ab55be973fdbe137a4af2f5f9445b
- SSDEEP 768:9DGDjBm3+tA3lXD/ti8HJPZVum6nWafJKedF6iDRDE:9qDjjq3lXDU8pLum6rJKe5RDE
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Malware Config
Signatures
-
resource yara_rule static1/unpack001/ffaea37f93399723c009ed393f0f13e29a8eabdb44a48b999c965ca853685dfe upx - Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/ffaea37f93399723c009ed393f0f13e29a8eabdb44a48b999c965ca853685dfe unpack002/out.upx
File Explorer
-
fc9104c968dd0280d5f4cbee5c6b640c.zip.zip 32KB
-
ffaea37f93399723c009ed393f0f13e29a8eabdb44a48b999c965ca853685dfe.exe 34KB
-
out.upx.exe 59KB
ffaea37f93399723c009ed393f0f13e29a8eabdb44a48b999c965ca853685dfe
- SHA256 ffaea37f93399723c009ed393f0f13e29a8eabdb44a48b999c965ca853685dfe
- MD5 fc9104c968dd0280d5f4cbee5c6b640c
- SHA1 f15e3f82d7c02d0ca97cfeca22066da61814763e
- SHA512 092caefee95b6fbc7ca81c83227d7ce81ee2c1f757728b817d8b63bf04a6eca7f7b517474f27bf1407b29cf0b07a3b3d7474bce4fd753e3634954b4b890557db
- SSDEEP 768:xp22qWFcy5XQ7lO41uirwA98p3MpkNBxd0cJWV6dy/x9J2:xpYoX58z1uirL98xMWnT0OQ9J2
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Password
infected
Minor OS version
0
Major OS version
4
Entry point
88976
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
Name
UPX0
Size
Virtual Size
52KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
31KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=3, id=125, productName=VS2005 build 50727, version=50727,
count=26, id=109, productName=VS2005 build 50727, version=50727,
count=19, id=123, productName=VS2005 build 50727, version=50727,
count=113, id=1, productName=Unmarked objects,
count=6, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
out.upx
- SHA256 a4c4b109204ee6faeb1f1b105adab36824faeda946388199d6cb267d74180676
- MD5 7955c4b27e831cff4d667f39d986e0dc
- SHA1 828d8db34354c4d3a278367da32a52939a8c25ef
- SHA512 11e03773d0d52f4a229919695370b7295e36e39a1be299234688f4fc65e75557cd4b6e8a05ef92a9a021cb9498fa5c9939f78996b30dd22eb4a252a078c8fb6a
- SSDEEP 768:5+6p+OMlgGMCWhfDzU7f7JDgiLI57+sByZ+XsfXpwt49Jm:5+mFM2HXKZgiLIksu+XM5B9J
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
22992
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
Name
.text
Size
21KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
11KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.WavfW
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
9KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=3, id=125, productName=VS2005 build 50727, version=50727,
count=26, id=109, productName=VS2005 build 50727, version=50727,
count=19, id=123, productName=VS2005 build 50727, version=50727,
count=113, id=1, productName=Unmarked objects,
count=6, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,