Behavioral task
behavioral1
Sample
4ab026da4f0df17224bf190c261dab72f06e40a3b15b44d79fdedaf401f615c6.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4ab026da4f0df17224bf190c261dab72f06e40a3b15b44d79fdedaf401f615c6.exe
Resource
win10v2004-20240802-en
General
-
Target
5f9d4155858bf995f1120af29175bd40.zip
-
Size
93KB
-
MD5
0443c77c859c6c03667ec82ebfba0b29
-
SHA1
ee5a844f6f8fae03c36df56991aa946f3e65bdfc
-
SHA256
9d9ce1ce4a9287d6b35d1fd4674259e82683875414731d5b864eea359e9c3010
-
SHA512
1d5e6b7ec44d751fa63449cf41ab9ca2cf5014f494e4d1cb0166215c49bf8138bb190cc9af40417d7bd474c1d57f401bb40d13a2f281dd007e978e8ee007632e
-
SSDEEP
1536:21zFPTYDH2uKavmgVe4EMa0gdMvKLD6ViPnjpRXQJZsvy3WIAZl+JgiEOXTemJkv:Ud4WyPVe4EZ5XPnjpuJyvyGl+JgiumJ+
Malware Config
Signatures
-
resource yara_rule static1/unpack001/4ab026da4f0df17224bf190c261dab72f06e40a3b15b44d79fdedaf401f615c6 upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/4ab026da4f0df17224bf190c261dab72f06e40a3b15b44d79fdedaf401f615c6
Files
-
5f9d4155858bf995f1120af29175bd40.zip.zip
Password: infected
-
4ab026da4f0df17224bf190c261dab72f06e40a3b15b44d79fdedaf401f615c6.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 83KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE