Behavioral task
behavioral1
Sample
a86f2c2a5dbbb7081a7e2682b190e6a5790dcf4c9dce040e2e037fd16d3295be.exe
Resource
win7-20240705-en
General
-
Target
43ff46d08b2d97a2e813f9fdf1cc27f9.zip
-
Size
2.3MB
-
MD5
cf5fdb4c46c321afe98ed1a83558d2b6
-
SHA1
8614a94ca2381b5d512af541363ee802a0e844b3
-
SHA256
7a699bb5c7ce0dfde2fb1bdcb7648d0f9d9c255d8f612cf5b4a538067d25ee84
-
SHA512
35d65365c82fab3b52413fa1475f9771b6127277a46793ab0468269649cf61ba1794d04dde05342e52c9fdd9bec7f9739bcc94cc909a73c811c6c68f587f0c82
-
SSDEEP
49152:SVNVV7heFIm960I/y3b2DbZ7yxb72uojq7T/+c4kkJvY2uDwH:SVR7h+Img0I/4b23Z2xb72hjIawgBuDS
Malware Config
Signatures
-
resource yara_rule static1/unpack001/a86f2c2a5dbbb7081a7e2682b190e6a5790dcf4c9dce040e2e037fd16d3295be upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/a86f2c2a5dbbb7081a7e2682b190e6a5790dcf4c9dce040e2e037fd16d3295be
Files
-
43ff46d08b2d97a2e813f9fdf1cc27f9.zip.zip
Password: infected
-
a86f2c2a5dbbb7081a7e2682b190e6a5790dcf4c9dce040e2e037fd16d3295be.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE