Behavioral task
behavioral1
Sample
8bcd833092ac63f9b6613c5e323c7420a4638a923cdc1cc4c9469d0de801dbaa.exe
Resource
win7-20240903-en
General
-
Target
d1a35b231aadc74ecf28d81bcfdadedd.zip
-
Size
13KB
-
MD5
0d60f0b22d624a1543858fe543227c5b
-
SHA1
fc2e2464bd313647f38bd0ad22a10f8c30375da3
-
SHA256
305e59c485a71a46d2618d9aa6de05670158d40934289236e34f42ba9a67a25a
-
SHA512
fde4e26e6f6c720b4ad6c5df218ee3392dd523866b22c4b46f18662c2d4cd388c2c82fdf4d80eff805b1038271bda1748cb024887ed38c0a1e3901a57fde4377
-
SSDEEP
384:un2xmpkLdnqTsYSFVIn/gVEAvfwR8bFWLKX:hn5nq6VIoV9vsAz
Malware Config
Signatures
-
resource yara_rule static1/unpack001/8bcd833092ac63f9b6613c5e323c7420a4638a923cdc1cc4c9469d0de801dbaa upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/8bcd833092ac63f9b6613c5e323c7420a4638a923cdc1cc4c9469d0de801dbaa unpack002/out.upx
Files
-
d1a35b231aadc74ecf28d81bcfdadedd.zip.zip
Password: infected
-
8bcd833092ac63f9b6613c5e323c7420a4638a923cdc1cc4c9469d0de801dbaa.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 752B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 496B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE