Behavioral task
behavioral1
Sample
385de70a43d8db27ea787d293f3bda0c48770357e0ce97e587d98c7276ee66ba.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
385de70a43d8db27ea787d293f3bda0c48770357e0ce97e587d98c7276ee66ba.exe
Resource
win10v2004-20230621-en
General
-
Target
385de70a43d8db27ea787d293f3bda0c48770357e0ce97e587d98c7276ee66ba
-
Size
198KB
-
MD5
719a78092d155cda8e9ea5327ffe4abc
-
SHA1
4bf04945a665ad74dcefb573f7a7ed05b0edf11d
-
SHA256
385de70a43d8db27ea787d293f3bda0c48770357e0ce97e587d98c7276ee66ba
-
SHA512
d9875c6d3e8e9e216de627d08b3d799c3b029996bfa55a83d02aefcab8395dfdc84ece1e77ad1c8985319a1c06008b11c02dbf5dd8e63acc75f07e112227f9ce
-
SSDEEP
6144:+6rGVVQ9YA2RWhBat49TMd2CgbJbVl+eC/:+6rCVCP249TcgVR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 385de70a43d8db27ea787d293f3bda0c48770357e0ce97e587d98c7276ee66ba
Files
-
385de70a43d8db27ea787d293f3bda0c48770357e0ce97e587d98c7276ee66ba.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 352KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 192KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE