Behavioral task
behavioral1
Sample
209964fe328802e1b57a676e9560ebcdfb46c6e04d45ba3200fb210d251ae7e0.exe
Resource
win7-20240704-en
General
-
Target
1042fe6e5f7dc8bbe5c3bae017ecf41edad030fe64c8f7181db6c10803e4264e
-
Size
32KB
-
MD5
13cef7020423fdbe6cd5fa219045ef34
-
SHA1
33d1a4afb773ea8078f8c375d0403bd484c33318
-
SHA256
1042fe6e5f7dc8bbe5c3bae017ecf41edad030fe64c8f7181db6c10803e4264e
-
SHA512
6acac036b05e5c9511e37e6945b123f186228ef2e49e8a2dd2726687954cd422b6abba2390b0a621fa8ff5bd90a8da72caf4359949d772b8948a92691557486e
-
SSDEEP
768:cCb7F0LImF9F5AJ0WZ1baCjXqjVkjJpCvJF:/3FVA5AACOjGVaT
Malware Config
Signatures
-
resource yara_rule static1/unpack001/209964fe328802e1b57a676e9560ebcdfb46c6e04d45ba3200fb210d251ae7e0 upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/209964fe328802e1b57a676e9560ebcdfb46c6e04d45ba3200fb210d251ae7e0 unpack002/out.upx
Files
-
1042fe6e5f7dc8bbe5c3bae017ecf41edad030fe64c8f7181db6c10803e4264e.zip
Password: infected
-
209964fe328802e1b57a676e9560ebcdfb46c6e04d45ba3200fb210d251ae7e0.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.WavfW Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ