Behavioral task
behavioral1
Sample
6edb96dac8939438b4b914335b7fe1917a9961907cf98f75cc4d063c2a6383cd.exe
Resource
win7-20240903-en
General
-
Target
12be4b4e3eeaba50138d2ea4ca2ff1ba.zip
-
Size
13KB
-
MD5
516afac3e8a839c6588a3f4b30595b7e
-
SHA1
99b18a7b4f09294a66825eff229324dafaafbaf2
-
SHA256
fbe7e8047482335ea475980a14b7ed34f4334c1242f42d8bb71b7fedfb266fb6
-
SHA512
0c1daec9eafca261e2d6a550b74e0bdf1aecb6080b6b92327e1a4fa715c6f7655f6480171112e510aa62d59f10dad37787f739a558a441d8dd8f371189721fcd
-
SSDEEP
384:Fhtd1YMkABY3Kd3Syo8h4V/Wt6f6Dn5m69HrjIcDyCnE7Dx1UOn:H5YMkRad3Y8G4BD5jlZyUE7Dog
Malware Config
Signatures
-
resource yara_rule static1/unpack001/6edb96dac8939438b4b914335b7fe1917a9961907cf98f75cc4d063c2a6383cd upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/6edb96dac8939438b4b914335b7fe1917a9961907cf98f75cc4d063c2a6383cd unpack002/out.upx
Files
-
12be4b4e3eeaba50138d2ea4ca2ff1ba.zip.zip
Password: infected
-
6edb96dac8939438b4b914335b7fe1917a9961907cf98f75cc4d063c2a6383cd.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE