Behavioral task
behavioral1
Sample
267019dd98094c75ef9c0505b6a9f336657574c9527a6612ad56631815d96b23.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
267019dd98094c75ef9c0505b6a9f336657574c9527a6612ad56631815d96b23.exe
Resource
win10v2004-20230621-en
General
-
Target
267019dd98094c75ef9c0505b6a9f336657574c9527a6612ad56631815d96b23
-
Size
3.6MB
-
MD5
13dc1b9563a5d8eb7930ef8c334411ce
-
SHA1
a1f3381e15475150cdc6432e5953a4e753cb0c16
-
SHA256
267019dd98094c75ef9c0505b6a9f336657574c9527a6612ad56631815d96b23
-
SHA512
0ec3e4e11dae511d13b1138d97e0ead3eed29bb2e6de4bb079b7c20233fb1a851493989f7ff8c7f7e4de21ac967746f42794d44bdee1947d7f149893c4ed2621
-
SSDEEP
98304:My46O3myDdC/MpBiMUXPu2mUd2KbEiXnnzkf1bF:My467TML7cu2BBbXXzQ/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 267019dd98094c75ef9c0505b6a9f336657574c9527a6612ad56631815d96b23
Files
-
267019dd98094c75ef9c0505b6a9f336657574c9527a6612ad56631815d96b23.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3.4MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 116KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE