Behavioral task
behavioral1
Sample
f24392c92255f9cc62552bda58e2c3e13d8830e7587a6f412c705295dfea7a5c.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
f24392c92255f9cc62552bda58e2c3e13d8830e7587a6f412c705295dfea7a5c.exe
Resource
win10v2004-20230621-en
General
-
Target
f24392c92255f9cc62552bda58e2c3e13d8830e7587a6f412c705295dfea7a5c
-
Size
2.7MB
-
MD5
1d7f294b54703bc4845f244f74fbd5b9
-
SHA1
37115d928adb2e8239cc235c25648ddf116f6ccd
-
SHA256
f24392c92255f9cc62552bda58e2c3e13d8830e7587a6f412c705295dfea7a5c
-
SHA512
585e64311d3fbe67dd0128b0819793c7a9f9c0dfc1d692048b234f262b1ac0933ae34fa38904ad398ded6ce69a8855f4568a895e4bb13f0a37338182b6e09f1a
-
SSDEEP
49152:/UkCVkkD7f+NaFe2rGN5zNJYuYwLN6kjOJ6D6O12KRgFeh0yvkzREhwxAOhZHtNF:/UykD7WNaFe2raxYuYkEkO6Dj1/RgwKp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f24392c92255f9cc62552bda58e2c3e13d8830e7587a6f412c705295dfea7a5c
Files
-
f24392c92255f9cc62552bda58e2c3e13d8830e7587a6f412c705295dfea7a5c.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 9.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 71KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE