Behavioral task
behavioral1
Sample
4fa5e97470a4adc7a507b466709e7cd924bb2336216865f9530e37eaceb935a3.exe
Resource
win7-20240903-en
General
-
Target
f8ba017a6e7f72eb0c27e9aa4bd6869e.zip
-
Size
13KB
-
MD5
814c18fae1a7df877c40ab74cd991f5d
-
SHA1
bb16bbcaf4d3c4a9254c6d7e98d8e916fcfdc10f
-
SHA256
936dcf0385179ebdb68c851bdf191754c9cc314b2b6bc629729372c938b4c580
-
SHA512
646f91711899a1ed45a65713fcdc34b22d113b603bd68a68887fbdff325baa44026efa36305a743e6a27532396d6e2d041b7b63c361a81489d96090a8137ad2c
-
SSDEEP
384:zNcy90RLndU3aVlo9EsS2mSC/MisjQhvRbqsVUicOL6vK2G7x57CB:iy90pnq3JS2nC0iUSvRXjLV2ao
Malware Config
Signatures
-
resource yara_rule static1/unpack001/4fa5e97470a4adc7a507b466709e7cd924bb2336216865f9530e37eaceb935a3 upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/4fa5e97470a4adc7a507b466709e7cd924bb2336216865f9530e37eaceb935a3 unpack002/out.upx
Files
-
f8ba017a6e7f72eb0c27e9aa4bd6869e.zip.zip
Password: infected
-
4fa5e97470a4adc7a507b466709e7cd924bb2336216865f9530e37eaceb935a3.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE