General
-
Target
TweakSonido.exe
-
Size
177KB
-
MD5
bf1159bc56be9c48979b0e54b2da57ac
-
SHA1
d988c621567fdc3443a560f1047d23a95519554e
-
SHA256
900b20cb9bfb54df44617f2e83aef47fc9f5047b55484d1fcdf041a4234840a6
-
SHA512
332dcb43373083cbe973f86a0fd026eb52f0d7be60ea38605016562619fcfe4d4e4c9418e7f0294346187959e07e0f86ab80894695163b2d7ac576684bb87f24
-
SSDEEP
3072:kB9wUGYQN2XD6UduD3saPigXkmIGob5zMWoutehcByUbH2zC:kwUdXG6xmro5zMWoShDr2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource TweakSonido.exe
Files
-
TweakSonido.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 128KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 108KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE