Behavioral task
behavioral1
Sample
f1e62af75de801810bf8d624ec49ef14604dbfa268d870be9f0fab599b23eabd.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
f1e62af75de801810bf8d624ec49ef14604dbfa268d870be9f0fab599b23eabd.exe
Resource
win10v2004-20230703-en
General
-
Target
f1e62af75de801810bf8d624ec49ef14604dbfa268d870be9f0fab599b23eabd
-
Size
354KB
-
MD5
39b98f7a775b3874332cbbdbe71b2649
-
SHA1
2cd9b85503e1f564fcb17584a7be72137a9ed163
-
SHA256
f1e62af75de801810bf8d624ec49ef14604dbfa268d870be9f0fab599b23eabd
-
SHA512
ebe6def620761005638dba70425a43b89160a922380ae80d955a076c0bc0d5f734ca7b9f5b4f9ffc2905ca349e4fa557e9c19d408c0ea8159dba198e29c743a4
-
SSDEEP
3072:+Q86Ly9QzfHMPtxmO1lZ562Mw6YowuMzNdH:+Q86LyCzfW/wKNuMb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f1e62af75de801810bf8d624ec49ef14604dbfa268d870be9f0fab599b23eabd
Files
-
f1e62af75de801810bf8d624ec49ef14604dbfa268d870be9f0fab599b23eabd.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 188KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tc Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE