General
-
Target
-
Size
746KB
-
MD5
f4dac7639f6a220fa5248c95eb9e42c1
-
SHA1
c9845bd2604e3f6d63580e8b4208a9c29b8330ef
-
SHA256
d1a0b66ed33de9d991799d8357b58ac2969b6db15fef54d4fa58ebc1f841c82a
-
SHA512
e5ebd929fae8a8183dd9ebdc0babd02cb18596148ca1e6e2a2f576717e012c985a1a98d5c067596ab73099341f60c9a6b5e16fde6c20ae69d0d52a55d04282b9
-
SSDEEP
12288:4xYLKwVaAAYbeX8ViGEyoornSq4+VqwyXFAWXqvjKihdATr+s:4xYlVaHTXEtEqVqxF5XqbXhdGr+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource [email protected]
Files
-
[email protected].exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 3.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 717KB - Virtual size: 720KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE