Behavioral task
behavioral1
Sample
66c4e1a58e79eb2712cbbd8d3a984fdbdce80feb609ca0f5428ec7ae4603c75f.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
66c4e1a58e79eb2712cbbd8d3a984fdbdce80feb609ca0f5428ec7ae4603c75f.exe
Resource
win10v2004-20240802-en
General
-
Target
1f7027866b276ae1498b416143d8f780.zip
-
Size
34KB
-
MD5
2de8413e116ef4b9aa50ca66263e9596
-
SHA1
11f1412ffcf49a9abfe90cf4aa949efd7e0a8356
-
SHA256
5cacf463001e8fc8c2e72d3269b107b6bc391e67116c81b9d10cc8e21b61d437
-
SHA512
675962ce3fc8706a6b55d061a04dc72957b8c9ca077ca52734f0d9e2d63fb9cd9da7a6fd91752832335c7e6af9684e90394b9d4670dbc74e292b8556842357de
-
SSDEEP
384:/ukuVCuQ2icmiLEp/DQlPfRyCz9DyikbaFiaux757pGiBTXd4iLlsyGfU4nCRFTv:y7QzcmiItD4n9Dyja8LxVr6c4CTTvCRu
Malware Config
Signatures
-
Detects MyDoom family 1 IoCs
resource yara_rule static1/unpack001/66c4e1a58e79eb2712cbbd8d3a984fdbdce80feb609ca0f5428ec7ae4603c75f family_mydoom -
Mydoom family
-
resource yara_rule static1/unpack001/66c4e1a58e79eb2712cbbd8d3a984fdbdce80feb609ca0f5428ec7ae4603c75f upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/66c4e1a58e79eb2712cbbd8d3a984fdbdce80feb609ca0f5428ec7ae4603c75f
Files
-
1f7027866b276ae1498b416143d8f780.zip.zip
Password: infected
-
66c4e1a58e79eb2712cbbd8d3a984fdbdce80feb609ca0f5428ec7ae4603c75f.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE