Behavioral task
behavioral1
Sample
f3d7c3293e20a9a1a0d81b7cdf45c4758152ba4acb212e58bd937a1dbcac96c6.exe
Resource
win7-20240708-en
General
-
Target
ccb22dc442247dea2b5dc66813d5d513.zip
-
Size
22KB
-
MD5
d1ea094e73d02d71dfa9c13d61337bb4
-
SHA1
4f950536d514da3d8e62545fe5600097be264761
-
SHA256
cba26c7ffc5b87d468da3836b4516b62ff9686b12618c3d4a30d268149bde2c6
-
SHA512
e9df0637b617313c1bd40df70f66a64c00211a3ddafc3b2b661ac73a3de93495f54b403e9f1f3232fb6b377a9dd710e047a3d3f0d892be855ceed4f736a2aec0
-
SSDEEP
384:2pU/ttSBlspmbFtlVZ1EetqNVT5JSlAzCPqr0KurkscKvc53zOu7nH6p9r/AAlrz:yAibBb3ntqNx8KCZKuJ3GOu7agAl
Malware Config
Signatures
-
resource yara_rule static1/unpack001/f3d7c3293e20a9a1a0d81b7cdf45c4758152ba4acb212e58bd937a1dbcac96c6 upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/f3d7c3293e20a9a1a0d81b7cdf45c4758152ba4acb212e58bd937a1dbcac96c6 unpack002/out.upx
Files
-
ccb22dc442247dea2b5dc66813d5d513.zip.zip
Password: infected
-
f3d7c3293e20a9a1a0d81b7cdf45c4758152ba4acb212e58bd937a1dbcac96c6.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 432KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 409KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE