Behavioral task
behavioral1
Sample
6113c1c3af868d857c99f0d532423f2dee9962a2aeb07f374bfb54919348892b.exe
Resource
win7-20240708-en
General
-
Target
81f1a36ef2325ddf391900b17f618de1.zip
-
Size
18KB
-
MD5
403e045804599915276fa7d062a81060
-
SHA1
9228d6214950b14ad6b21a11c5a259fad73faf9e
-
SHA256
211126bced4aa23669fd277f6cb1da6b7788fdc85b4405a4c55e54f5e8c1d60a
-
SHA512
48795a381473515c26f1aff3e4357431c050090ebfe37b5347390f4d9ffd21a7f8f4cccabff95b79c03af61c204157a25b5219a4d5a40c74f1dc46cab9a630e0
-
SSDEEP
384:R+IBW8kUfU4peieu9Ur4P4WrhvPlpeD8FjaPUmQ5SO2/xb9:UIBWvUcueieONP4WrVPlMwFMQ5S9R9
Malware Config
Signatures
-
resource yara_rule static1/unpack001/6113c1c3af868d857c99f0d532423f2dee9962a2aeb07f374bfb54919348892b upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/6113c1c3af868d857c99f0d532423f2dee9962a2aeb07f374bfb54919348892b
Files
-
81f1a36ef2325ddf391900b17f618de1.zip.zip
Password: infected
-
6113c1c3af868d857c99f0d532423f2dee9962a2aeb07f374bfb54919348892b.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE