Behavioral task
behavioral1
Sample
31a370f95e92348ef4c9eed5d8936d2e3b10b036addf36c120acf4162b828a17.exe
Resource
win7-20240705-en
General
-
Target
dcc52f7cea0386bfa6d902472d562631.zip
-
Size
13KB
-
MD5
2c3e3bec1f2e0368aa0be00067414c5d
-
SHA1
21853c5c4017196aa60a2b20f2fb07a682d79386
-
SHA256
b5f4d921c353f0eff6883133b11cc74fef90a2b639c2d5532c4d91e776ccd768
-
SHA512
2e5b4491752ae7e89bb9d2a8de161913959d379112a586c3793ca8bfbac133e21562773cc49cb86bfb1c09cd192469e20a9d1076e63cdf915f7a04024b953aec
-
SSDEEP
192:TP0RO+bSBOVTeLH4+YmDB1ryGlXlEq5qzqDdSAveXcI0cMN+CBewv9W0QFwPiJP:TsRj1mZB1n1lE/4veXScMNdBe64XFzJP
Malware Config
Signatures
-
resource yara_rule static1/unpack001/31a370f95e92348ef4c9eed5d8936d2e3b10b036addf36c120acf4162b828a17 upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/31a370f95e92348ef4c9eed5d8936d2e3b10b036addf36c120acf4162b828a17 unpack002/out.upx
Files
-
dcc52f7cea0386bfa6d902472d562631.zip.zip
Password: infected
-
31a370f95e92348ef4c9eed5d8936d2e3b10b036addf36c120acf4162b828a17.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE