Behavioral task
behavioral1
Sample
2e84832fd9d1c23ffd39778bb91fb6f07751aa11367d47a3e278c6a813376cb6.exe
Resource
win7-20240708-en
General
-
Target
cf6bc6cb00d4876ab0595e3d1c0abe7a.zip
-
Size
48KB
-
MD5
0f814077baf985b9a5f416101e45c703
-
SHA1
81a45f8483a20149376d7e42cd61ca77f4e5e723
-
SHA256
7ec2897bacf6792a7327ae3b1e291b1fb5caa5c8acf08de9efc03a22a61b4c6d
-
SHA512
4189a962608e4f0219449181678d6927d01baaca820658b7c09e0cc18e862f5a4dc9c16bf7de4b6a9e87d4ab1074df8f5930b0788973b1904a5c808d38661295
-
SSDEEP
768:WBA700GDfKYvesfrpmxSfk508agGU62CpkAHP/jnxg4nHJzwmLnG8rT7P0j8N5:WmY0GDfK/sTQkcq0ATnxgkEmprTL48T
Malware Config
Signatures
-
resource yara_rule static1/unpack001/2e84832fd9d1c23ffd39778bb91fb6f07751aa11367d47a3e278c6a813376cb6 upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/2e84832fd9d1c23ffd39778bb91fb6f07751aa11367d47a3e278c6a813376cb6
Files
-
cf6bc6cb00d4876ab0595e3d1c0abe7a.zip.zip
Password: infected
-
2e84832fd9d1c23ffd39778bb91fb6f07751aa11367d47a3e278c6a813376cb6.exe windows:4 windows x86 arch:x86
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ap0x Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE