Behavioral task
behavioral1
Sample
9e68803ee118256c8a1729b7d1f0b761ccdfd50cff611cfcd9d98f879a15410e.exe
Resource
win7-20240704-en
General
-
Target
60efa61715efec5ea64f9375d2386911.zip
-
Size
93KB
-
MD5
837cdb432e7e54fb32adf772d9d99518
-
SHA1
ac56ea6ae5c1cfb138cb571c793aebab85eda57b
-
SHA256
48cf7b174cffc6d6ef9ea3adc71d7b631f70ee30d4ad2a0f5f6f172d0b3cd461
-
SHA512
759d5186b094b56c288b0112b88847edb83877b0ca8276737b44f6a0dd8470202508c3df261a6f169b119304f1542ec5cc90bbce9fe9ba7b011359b1f9981981
-
SSDEEP
1536:qb2OUVHVODAh3/2+MBEbxtlAHs9lQVQeBrwGgGnhjISr8Q/Z9VJDd:qbgHd8BEbxtRlY5EKjdrbld
Malware Config
Signatures
-
resource yara_rule static1/unpack001/9e68803ee118256c8a1729b7d1f0b761ccdfd50cff611cfcd9d98f879a15410e upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/9e68803ee118256c8a1729b7d1f0b761ccdfd50cff611cfcd9d98f879a15410e
Files
-
60efa61715efec5ea64f9375d2386911.zip.zip
Password: infected
-
9e68803ee118256c8a1729b7d1f0b761ccdfd50cff611cfcd9d98f879a15410e.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE