Behavioral task
behavioral1
Sample
58a5c3da58ba1fe901146c4ff7cf5b8008b5d9b1422669bb345c1d10428ca77d.exe
Resource
win7-20240729-en
General
-
Target
c6accca63ac46d9c9ea86a0be19f9ef307f831363990ad173bd835129efade9d
-
Size
32KB
-
MD5
724baea02f2b786250085f3a59822ef4
-
SHA1
64187bffa9646ce6cd9de07877e2d161949d85c0
-
SHA256
c6accca63ac46d9c9ea86a0be19f9ef307f831363990ad173bd835129efade9d
-
SHA512
6925fdbb9fda233f29decfe5968970ad5295ae07572c976e2b55fec0c01e63a26636b9d8f9dfd780cfa6608469e30ee0d44e2dd126ba257c1c09f4d360f97e41
-
SSDEEP
768:KtC/qjETeGEHKMG/hDwYjHsp32PsSvv9NNttY:N2tDHKMG/zHsx2VX9NN3Y
Malware Config
Signatures
-
resource yara_rule static1/unpack001/58a5c3da58ba1fe901146c4ff7cf5b8008b5d9b1422669bb345c1d10428ca77d upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/58a5c3da58ba1fe901146c4ff7cf5b8008b5d9b1422669bb345c1d10428ca77d unpack002/out.upx
Files
-
c6accca63ac46d9c9ea86a0be19f9ef307f831363990ad173bd835129efade9d.zip
Password: infected
-
58a5c3da58ba1fe901146c4ff7cf5b8008b5d9b1422669bb345c1d10428ca77d.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.WavfW Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ