Behavioral task
behavioral1
Sample
f72cb48be647c5a8bd47d9c738da35f27d5ee6822157a54d53b48d12501574cf.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
f72cb48be647c5a8bd47d9c738da35f27d5ee6822157a54d53b48d12501574cf.exe
Resource
win10v2004-20230831-en
General
-
Target
f72cb48be647c5a8bd47d9c738da35f27d5ee6822157a54d53b48d12501574cf
-
Size
2.5MB
-
MD5
edae8215031264148457cc22b3649de2
-
SHA1
7256a59726cd887c2efa4c0dfdeeba1d2026ca36
-
SHA256
f72cb48be647c5a8bd47d9c738da35f27d5ee6822157a54d53b48d12501574cf
-
SHA512
34df0001893116760d3d80b71a85e2285a913b2f887b7034f2b1bde76e5bd20fef5cbc1a8e744a24b72eb46629464bd83b3902ba2285a525cda3d27ec6ec6ad9
-
SSDEEP
49152:k0Rv+f2WIiXEMT8SNGsMC8gB/T54KOmqkEr59vLkX:k0RM2aEMT8SNGsMC8gB/T54KOmqkq9D4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f72cb48be647c5a8bd47d9c738da35f27d5ee6822157a54d53b48d12501574cf
Files
-
f72cb48be647c5a8bd47d9c738da35f27d5ee6822157a54d53b48d12501574cf.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 281KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE