Behavioral task
behavioral1
Sample
b575fd5b9fa3eb4cdf5787bec9d27cdf79214c6f8e8dec0964f1a83d66d5a071.exe
Resource
win7-20240903-en
General
-
Target
3eeca85ca0627511f1552ebcddcaba7e.zip
-
Size
7KB
-
MD5
5ab31df51bd129e7e349be3258607679
-
SHA1
ffbe3fa085bdb35b5605246644dda6054e4a1349
-
SHA256
9d120d7d2a6d177c4cdce3571bef342eed76c9d38b004fff836109eb31b218db
-
SHA512
4308fea41bb735392f980422b62201f0333cca2401be6d384c6b007c82284b51e2c453f22093adaf0c8426196de0c83db3e334ae36324051fdd5405d2866b3c9
-
SSDEEP
192:GwbEwBKovHbJ6ql4g04FsKmL8Pp/XNS6ehHclpOy36:fb9covHbEvLeXetMpq
Malware Config
Signatures
-
resource yara_rule static1/unpack001/b575fd5b9fa3eb4cdf5787bec9d27cdf79214c6f8e8dec0964f1a83d66d5a071 upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/b575fd5b9fa3eb4cdf5787bec9d27cdf79214c6f8e8dec0964f1a83d66d5a071 unpack002/out.upx
Files
-
3eeca85ca0627511f1552ebcddcaba7e.zip.zip
Password: infected
-
b575fd5b9fa3eb4cdf5787bec9d27cdf79214c6f8e8dec0964f1a83d66d5a071.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 752B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 496B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE