Behavioral task
behavioral1
Sample
98c73a9f16388398ddc6851cff8f8d73c8c61153d604ef9edfe4b8400d1e4d3e.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
98c73a9f16388398ddc6851cff8f8d73c8c61153d604ef9edfe4b8400d1e4d3e.exe
Resource
win10v2004-20240802-en
General
-
Target
6b43e21569941156ecb6a65ee608de35.zip
-
Size
122KB
-
MD5
71b8a08d08346deb5048ccb2618c6128
-
SHA1
425fadee63b500e5ec1b9383fcafa89b88b4c53e
-
SHA256
6804bfae5c8f9452ac76900229f21bd83778410cf2679042440459b3ed86ad19
-
SHA512
73d4d56966c7bc73d4e28ab367351c99aa006a404ee313b87f6cf2dcaf5f5472457ebd892d3853c9d03903ca8ffe379096296789979a0b1c6f6703f092a0ec61
-
SSDEEP
3072:fMKJs5zM6rzxcxbon37g/aCqfbgi4stay8bRtaDTA:f1yMgW9OgyJfcetp0t+A
Malware Config
Signatures
-
resource yara_rule static1/unpack001/98c73a9f16388398ddc6851cff8f8d73c8c61153d604ef9edfe4b8400d1e4d3e upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/98c73a9f16388398ddc6851cff8f8d73c8c61153d604ef9edfe4b8400d1e4d3e unpack002/out.upx
Files
-
6b43e21569941156ecb6a65ee608de35.zip.zip
Password: infected
-
98c73a9f16388398ddc6851cff8f8d73c8c61153d604ef9edfe4b8400d1e4d3e.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 532KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 118KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 612KB - Virtual size: 610KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ