Behavioral task
behavioral1
Sample
5d5a21e11d1a3f71d37ab04c5116ecaf2071a37ed24a08de8ff0d015be4785ed.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5d5a21e11d1a3f71d37ab04c5116ecaf2071a37ed24a08de8ff0d015be4785ed.exe
Resource
win10v2004-20240802-en
General
-
Target
b06e65f40299634496a05dfbbef456a5.zip
-
Size
173KB
-
MD5
88407e2c84038ebd9c3f088ddb18af46
-
SHA1
58a74e630a37839736c7a43b4496f612fcdac0d6
-
SHA256
59de39ffd22a3be534acedb8b1a51151735f4ae7de8ab637181b43ec95f15125
-
SHA512
d4aa218b455a5d7b41ccacd7559255647ab3114ae62efe12c18b8a6d267a55db33f647c6d34f41fa1ffa918bf25664c255bf2143a1297152d2c727696b4094f7
-
SSDEEP
3072:suQ5HyTGYEJml9tiYlIGiTRR7RlV+x6HCzeZ58U0yCU+Y5N+MP2c+Ae7a5PiNAh1:s/RoHt8RL+xcqeZ3MU+YJCn7ack8xjSh
Malware Config
Signatures
-
resource yara_rule static1/unpack001/5d5a21e11d1a3f71d37ab04c5116ecaf2071a37ed24a08de8ff0d015be4785ed upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/5d5a21e11d1a3f71d37ab04c5116ecaf2071a37ed24a08de8ff0d015be4785ed
Files
-
b06e65f40299634496a05dfbbef456a5.zip.zip
Password: infected
-
5d5a21e11d1a3f71d37ab04c5116ecaf2071a37ed24a08de8ff0d015be4785ed.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 252KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 177KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE