Behavioral task
behavioral1
Sample
2343b3561e40c6a6407983602c8133e9052ace591e1183efc0d714aef8b48713.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
2343b3561e40c6a6407983602c8133e9052ace591e1183efc0d714aef8b48713.exe
Resource
win10v2004-20230703-en
General
-
Target
2343b3561e40c6a6407983602c8133e9052ace591e1183efc0d714aef8b48713
-
Size
1.5MB
-
MD5
4cf89d3e729f73af1c4766db1b2e0afa
-
SHA1
d844ab2ee71df8171de0628ae9a2a084af29eaa2
-
SHA256
2343b3561e40c6a6407983602c8133e9052ace591e1183efc0d714aef8b48713
-
SHA512
017b5066bd9671ab3e35cf8e96d4dc1f979c5eec57e46c0607df83e5e91acdc02152ba61c4fd7e0c51b7d2d7e324865f24d949c2f44395c9846d84123cbb7f64
-
SSDEEP
49152:y4DZE7mdbWHgVO1LkU4HPikKytV3BuFJyMK9gnzzR6:bDZyAVKz4HPiFCVAFgMXzzR6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2343b3561e40c6a6407983602c8133e9052ace591e1183efc0d714aef8b48713
Files
-
2343b3561e40c6a6407983602c8133e9052ace591e1183efc0d714aef8b48713.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 5.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE