Behavioral task
behavioral1
Sample
8ce6155435836a56b6065696528c78eae2ba5bd9536581e25e1fef84a846b735.exe
Resource
win7-20240705-en
General
-
Target
dac870334d6c59de5a14c8690f2c8ae9.zip
-
Size
349KB
-
MD5
2baa72e96f6dcfeb94665f97746aa5be
-
SHA1
9c609526e3ef0a0abf8b458a76924720c988fac6
-
SHA256
1ab9a8ecb0b3a0ff1ea654d0592049484356ace52935d321a13bda0613d87b41
-
SHA512
d299d9a5fc351926681d2368899e80448dadf580aab744578c1422585676432a2d9b9ed18c4f506fcf497261b08a5003a00a8bbc1bf5ffbf9ebd222894f05b14
-
SSDEEP
6144:vklwSuqs1eQhNTcd3AdypWZrILKWEtwgebvEP7wRy9CViFXUTbOyrPM7duj2vz:vkA1e6Va3A0W22WUGQjXHF2VrExuj2vz
Malware Config
Signatures
-
resource yara_rule static1/unpack001/8ce6155435836a56b6065696528c78eae2ba5bd9536581e25e1fef84a846b735 upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/8ce6155435836a56b6065696528c78eae2ba5bd9536581e25e1fef84a846b735
Files
-
dac870334d6c59de5a14c8690f2c8ae9.zip.zip
Password: infected
-
8ce6155435836a56b6065696528c78eae2ba5bd9536581e25e1fef84a846b735.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE