Behavioral task
behavioral1
Sample
2145efa20c65e1cda8e13a26ae784a3c9c5e67b59c678b43d387653caf97b022.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
2145efa20c65e1cda8e13a26ae784a3c9c5e67b59c678b43d387653caf97b022.exe
Resource
win10v2004-20230824-en
General
-
Target
2145efa20c65e1cda8e13a26ae784a3c9c5e67b59c678b43d387653caf97b022
-
Size
1.3MB
-
MD5
60c7ec2c4fb5af5ed1a492a36d8c95a8
-
SHA1
74259f76337a0a220502e2f3fa12792d20ce0fdf
-
SHA256
2145efa20c65e1cda8e13a26ae784a3c9c5e67b59c678b43d387653caf97b022
-
SHA512
fe21d0953ad1a571b936804f8597c25037259bc07da61f41369d15d490ff355a844650f465f259be3bcf10ae7921c99efc25e37afb35bbcda1df3b0ea019e671
-
SSDEEP
12288:LpP902z49dDyGbWooh7SOaWViP3ghtdjg8JD9G/uXYn/zq4VNWh:LpbsdWGbHoRSOfgghtdjg8JJGYAp3W
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2145efa20c65e1cda8e13a26ae784a3c9c5e67b59c678b43d387653caf97b022
Files
-
2145efa20c65e1cda8e13a26ae784a3c9c5e67b59c678b43d387653caf97b022.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 892KB - Virtual size: 892KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 399KB - Virtual size: 400KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE