Behavioral task
behavioral1
Sample
1339d2bf612ad0cf6eeee4c4c02b32e201d5fa2b0b8ed7a4424d149ecaa039af.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
1339d2bf612ad0cf6eeee4c4c02b32e201d5fa2b0b8ed7a4424d149ecaa039af.exe
Resource
win10v2004-20230915-en
General
-
Target
1339d2bf612ad0cf6eeee4c4c02b32e201d5fa2b0b8ed7a4424d149ecaa039af
-
Size
8.2MB
-
MD5
817176e7e5fc331beb832e485152a3b1
-
SHA1
ff6d9dadc2a0bd3885304066021d3535a16b267a
-
SHA256
1339d2bf612ad0cf6eeee4c4c02b32e201d5fa2b0b8ed7a4424d149ecaa039af
-
SHA512
f42d3f48ba137c70df6c346a2e5ba3fd15d31ad12d49fad3112e29898a4b5a9177b7078f782eb8ea53aef70e234077c45f68da44310d69dfd8153e43e3a7064e
-
SSDEEP
196608:CRPubT2lUyNfIFylUMBRLYny6YG2+m1ZUVSTzs6J1THwsg:CxubK2LF+UMBqnH3MI7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1339d2bf612ad0cf6eeee4c4c02b32e201d5fa2b0b8ed7a4424d149ecaa039af
Files
-
1339d2bf612ad0cf6eeee4c4c02b32e201d5fa2b0b8ed7a4424d149ecaa039af.exe windows:6 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 27.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8.1MB - Virtual size: 8.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 155KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE