Behavioral task
behavioral1
Sample
4a319d5bdb2236d7ca0493e4aac19901458827e3fda00c47e4b597ba6833aec8.exe
Resource
win7-20240708-en
General
-
Target
6ff393ddeba88b2f8fffcd85e86ed9b7.zip
-
Size
163KB
-
MD5
a374de5ad012d3c99cab4e76fe308a38
-
SHA1
66c72a8efe4f6fb74b77557315d2ba361364a307
-
SHA256
f1f67b68b1991ede77f6e1b38fe779ee33d10f3d49cdc2bc77914c5ada22428a
-
SHA512
b012632c9659672bb7b42eafd3efaeb752499df76dd55ee1d1b368c93c445cb75f43385a0d82ff287426f109e28d253ec2c993f1c14ff37caf438293f498ecf2
-
SSDEEP
3072:fgkOzermtZhUkDGVEiM7Su40vcIDd4bSGpma4bwvZ+:fbWt1j7140vH42Na4bi+
Malware Config
Signatures
-
resource yara_rule static1/unpack001/4a319d5bdb2236d7ca0493e4aac19901458827e3fda00c47e4b597ba6833aec8 upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/4a319d5bdb2236d7ca0493e4aac19901458827e3fda00c47e4b597ba6833aec8
Files
-
6ff393ddeba88b2f8fffcd85e86ed9b7.zip.zip
Password: infected
-
4a319d5bdb2236d7ca0493e4aac19901458827e3fda00c47e4b597ba6833aec8.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 496KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 77KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE