Behavioral task
behavioral1
Sample
31f43fe2fe9f4f86c6f436f3b54e6b5fa28f96f1e6d66a62f1e4a384df50fb4d.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
31f43fe2fe9f4f86c6f436f3b54e6b5fa28f96f1e6d66a62f1e4a384df50fb4d.exe
Resource
win10v2004-20230915-en
General
-
Target
31f43fe2fe9f4f86c6f436f3b54e6b5fa28f96f1e6d66a62f1e4a384df50fb4d
-
Size
2.2MB
-
MD5
533cb4687b5c8cec49b50cac6e9d7bae
-
SHA1
eb52a0ad0cb19743d216c1935dff1de07284dc0e
-
SHA256
31f43fe2fe9f4f86c6f436f3b54e6b5fa28f96f1e6d66a62f1e4a384df50fb4d
-
SHA512
81d3ce780026205265a28a9945e566525242d45bed102bde07ef2bef7c6ff0c55b2f6e43f42f329e2952828fdd2c430c89ab914028cd08f23e921ab881f95ad2
-
SSDEEP
49152:kQMtZI5S+e2M/dnWaQwTI8nUauUEkW19/K2Cl:k1t2rpKdWtwE8gUEk8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 31f43fe2fe9f4f86c6f436f3b54e6b5fa28f96f1e6d66a62f1e4a384df50fb4d
Files
-
31f43fe2fe9f4f86c6f436f3b54e6b5fa28f96f1e6d66a62f1e4a384df50fb4d.exe windows:6 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 3.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 696KB - Virtual size: 696KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE