Behavioral task
behavioral1
Sample
da8c15efe7b0b47807f69efb0f9fbb701d99d70f5b4a6e6650eca138397d9670.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
da8c15efe7b0b47807f69efb0f9fbb701d99d70f5b4a6e6650eca138397d9670.exe
Resource
win10v2004-20230703-en
General
-
Target
da8c15efe7b0b47807f69efb0f9fbb701d99d70f5b4a6e6650eca138397d9670
-
Size
652KB
-
MD5
361437e98055b0a212052be331651001
-
SHA1
d7a68afe28684d905c3ccce1803afdc61f5a6374
-
SHA256
da8c15efe7b0b47807f69efb0f9fbb701d99d70f5b4a6e6650eca138397d9670
-
SHA512
8f998bb5e7eada06c77b7b9db59c0389bd6068f54f2a1ea03c3ffcb0b6e209284aa0e7824adb1a8bdb590171ddefe45f6680d46a059f4086e5b4b2f6fbea18da
-
SSDEEP
12288:f3/PfNmtvPRN2pN4gNPCNGNN+UNz0q0NPfNdHNvaN3WNjuN24NGVN3xosOoS:f3F2mgKNSs0qIjFQmxTLOs
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource da8c15efe7b0b47807f69efb0f9fbb701d99d70f5b4a6e6650eca138397d9670
Files
-
da8c15efe7b0b47807f69efb0f9fbb701d99d70f5b4a6e6650eca138397d9670.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 648KB - Virtual size: 652KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE