Behavioral task
behavioral1
Sample
337a3eb59f57b4a2d85e26ad2eb224a0e6046b1316ac89aca97fcff72ef2876b.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
337a3eb59f57b4a2d85e26ad2eb224a0e6046b1316ac89aca97fcff72ef2876b.exe
Resource
win10v2004-20230915-en
General
-
Target
337a3eb59f57b4a2d85e26ad2eb224a0e6046b1316ac89aca97fcff72ef2876b
-
Size
1.1MB
-
MD5
b394fc1720852c8ae71d206ad02aeb4b
-
SHA1
105fa40bf0d804bec6db83838d6b6b58bfa31aaf
-
SHA256
337a3eb59f57b4a2d85e26ad2eb224a0e6046b1316ac89aca97fcff72ef2876b
-
SHA512
8ba3e8de9b189afb7a085051312b19f2e9f4e50eabfea179f894e7dae306425c2c0b70fd8b61354e55d69e7d68fcdc710ead7fcf2731adbfdf215f613acfdc28
-
SSDEEP
24576:plH60PIKc16wu8e2t8M8Jg6c+DrEhyMZR6/0+sP5:pNrPOje2yDc4uyMHyzs
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 337a3eb59f57b4a2d85e26ad2eb224a0e6046b1316ac89aca97fcff72ef2876b
Files
-
337a3eb59f57b4a2d85e26ad2eb224a0e6046b1316ac89aca97fcff72ef2876b.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE