Behavioral task
behavioral1
Sample
60991663d14ad6c7905823301bdfc67ef632e37046db82acbfda4a91c7364484.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
60991663d14ad6c7905823301bdfc67ef632e37046db82acbfda4a91c7364484.exe
Resource
win10v2004-20240802-en
General
-
Target
21abada9dc9df14aee6ab9f7dd9ab6b5.zip
-
Size
1.6MB
-
MD5
5b4aab44c98f726ea12c555e1d84babe
-
SHA1
2edc6e5f9460d89d5df330b5c6ad63323ae67e2b
-
SHA256
d0b47a1d3a5ed8d7719df4bf3d1341fed29071af976245e9f70551215be2a77d
-
SHA512
5b93f66ff3ab9b6c2ad7a224e0b41dbed1752b09de3cf616d7096fbf5525a094477c608e774a630d36097c3c36ce7e5129e8e4407d12e3cd343e5f8f7465dfc9
-
SSDEEP
49152:KkcdLAzdvmADZOorQChJywvzKT+e1H1K98y9+pgA:BUyWMQAvm1ED9+pgA
Malware Config
Signatures
-
resource yara_rule static1/unpack001/60991663d14ad6c7905823301bdfc67ef632e37046db82acbfda4a91c7364484 upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/60991663d14ad6c7905823301bdfc67ef632e37046db82acbfda4a91c7364484
Files
-
21abada9dc9df14aee6ab9f7dd9ab6b5.zip.zip
Password: infected
-
60991663d14ad6c7905823301bdfc67ef632e37046db82acbfda4a91c7364484.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 83KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE