Behavioral task
behavioral1
Sample
f58cda7508a91f2711f464c780c6ee805d32605414a8812c43cac7c371b6785f.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
f58cda7508a91f2711f464c780c6ee805d32605414a8812c43cac7c371b6785f.exe
Resource
win10v2004-20240802-en
General
-
Target
1be83ef9faa2b8e2b276d8c1022eb3ba.zip
-
Size
172KB
-
MD5
aa0f8afb59061d7d6830c8f476e138db
-
SHA1
58ed771f0dfed9b69fb2eb2a844825091b46bc8a
-
SHA256
40a9c07b1ff08f3f00688131d7595e3863cb2aa9b423f9dbfde0e6f5977ec366
-
SHA512
ba0214d89b859282c3d1d64d28b3495c9704ab60cfed6d71074c7ee9df1f85d332c88bd9a2548137a522d8181ed27bcc93fcb02a4d7b11935662018598cb2268
-
SSDEEP
3072:D3i3FzznwC4i+tSpWWsGMykivPDLVH4VNtWeX6keOpXYFPOuTw1b22Bv3am0w:D3i3Bzwvi+koQMyWkJfpF3w02t3L0w
Malware Config
Signatures
-
resource yara_rule static1/unpack001/f58cda7508a91f2711f464c780c6ee805d32605414a8812c43cac7c371b6785f upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/f58cda7508a91f2711f464c780c6ee805d32605414a8812c43cac7c371b6785f
Files
-
1be83ef9faa2b8e2b276d8c1022eb3ba.zip.zip
Password: infected
-
f58cda7508a91f2711f464c780c6ee805d32605414a8812c43cac7c371b6785f.exe windows:5 windows x86 arch:x86
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 51KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE