Behavioral task
behavioral1
Sample
eaad1f637dd4542ef385b9eaf37299013051dd99decf41e1c396c07f1a73b030.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eaad1f637dd4542ef385b9eaf37299013051dd99decf41e1c396c07f1a73b030.exe
Resource
win10v2004-20240802-en
General
-
Target
ceffc24c49b087e4ef5aaa2295cbafbd.zip
-
Size
94KB
-
MD5
099c5a91e659cb57a98fa21698579b51
-
SHA1
657caecf393f14c3154871b6c120c3abdac8085a
-
SHA256
4a376bc8ce8fce18016fc8d79b10807e3c8c68a56cd16b29c968c8066d5cfa46
-
SHA512
d9b5b512ff99f41f24c2a70d3e0490255a1d857ed7bbc12a50c8eccb301ea3ea84704dde87f50daa96075222f75e322e23dc92983dd82f561eb9c8d8225cda48
-
SSDEEP
1536:DycmaGmahRgOIDOoudooCWWp8HnYDuTGUyTHTi9suYOYyOfuWE:e+DahO7DJWWpin+ndTequ/BAur
Malware Config
Signatures
-
resource yara_rule static1/unpack001/eaad1f637dd4542ef385b9eaf37299013051dd99decf41e1c396c07f1a73b030 upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/eaad1f637dd4542ef385b9eaf37299013051dd99decf41e1c396c07f1a73b030
Files
-
ceffc24c49b087e4ef5aaa2295cbafbd.zip.zip
Password: infected
-
eaad1f637dd4542ef385b9eaf37299013051dd99decf41e1c396c07f1a73b030.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 83KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE