Behavioral task
behavioral1
Sample
cea0f6579e0a9fc4f65c6d764a391e16713718b2ae8f9d02ec0b5aab0052f275.exe
Resource
win7-20240729-en
General
-
Target
52460fefd53d9f72c39bbaabb636f036.zip
-
Size
79KB
-
MD5
d0eb90b7040008b04b7f6612e9a033af
-
SHA1
f1fb1c68a6d6de2512aacc03d82ca277f9c57122
-
SHA256
46e33f860a0439eac1126b600e66174c6a98904b6efc91cedb727f8672e02011
-
SHA512
87589d93207be3d4f6f8eacfd253d5fa894cfb9761d1a305018995c7e470fdd50d737fa69e21a0de74ae430f835b89b4cbc200141200bffa00e48a7f9c37ff6b
-
SSDEEP
1536:rHgoJwftv5C7KhpoG/97PVMVsI6JPFhgScfezS/6aJudinuz2Q8/7T6D:L9aG7Khp5V7NMh6JPFhgSyOZaJudj2na
Malware Config
Signatures
-
resource yara_rule static1/unpack001/cea0f6579e0a9fc4f65c6d764a391e16713718b2ae8f9d02ec0b5aab0052f275 upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/cea0f6579e0a9fc4f65c6d764a391e16713718b2ae8f9d02ec0b5aab0052f275
Files
-
52460fefd53d9f72c39bbaabb636f036.zip.zip
Password: infected
-
cea0f6579e0a9fc4f65c6d764a391e16713718b2ae8f9d02ec0b5aab0052f275.exe .ps1 windows:4 windows x86 arch:x86 polyglot
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE