MyFunc87
Behavioral task
behavioral1
Sample
good.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
good.exe
Resource
win10v2004-20250314-en
General
-
Target
2e65279809a6a691c25a87f51f02d6932ada3e029c2c93374616b406baad6b16.zip
-
Size
118KB
-
MD5
bac8d5e237659881531d5a283ea1d395
-
SHA1
23384234ea15f8c7116c678d8285744390802952
-
SHA256
2e65279809a6a691c25a87f51f02d6932ada3e029c2c93374616b406baad6b16
-
SHA512
839cd9fb8ea0a366aa140032dc03422d037502e71e179167a79bcc0bd88b8359c71b874a9e5f42324659a0bcc74b8f17a10339e5b85f5fe0bb792b5ed842cc6b
-
SSDEEP
3072:oHzO1El16HyySb7gev/NQErLeJpsvNF+PAb7ql98:Qz6K6Sxb79lerSg+
Malware Config
Signatures
-
resource yara_rule static1/unpack001/good.bin upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/good.bin unpack002/out.upx
Files
-
2e65279809a6a691c25a87f51f02d6932ada3e029c2c93374616b406baad6b16.zip.zip
Password: infected
-
good.bin.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 40.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 124KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
.text Size: 159KB - Virtual size: 158KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 40.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ