General
-
Target
-
Size
169KB
-
MD5
a038ca58f824f5c2c9d2ad65577f52ed
-
SHA1
9fe2e16ed1c26dc14c18206e10f08f1b554caba5
-
SHA256
0503d2ec3f8e4b25a6ed6c1923dd12adc7a0c4c38965d8aa782a34269071a96c
-
SHA512
26c7d5b0f4988695e6a51d0932ba9b3c0691948af0fe3afc09523202e7d36e98c7fb6b2c36c8001a58bedef485da8c0aee1f7e2fc10eea216904426d6a1a07c9
-
SSDEEP
3072:vVZ/VGS7rN+s2ymgqoxkCz6lbwh1NxEIAV6la+yNv/C4uKAI8EqyMoutUit:vV28o6o41S60n/putJoSU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource [email protected]
Files
-
[email protected].exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 166KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE