Behavioral task
behavioral1
Sample
20be840bbdffc4db97a7538cb70d60558fb1d0849e465f195e9fc4fb02216635.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
20be840bbdffc4db97a7538cb70d60558fb1d0849e465f195e9fc4fb02216635.exe
Resource
win10v2004-20230915-en
General
-
Target
20be840bbdffc4db97a7538cb70d60558fb1d0849e465f195e9fc4fb02216635
-
Size
904KB
-
MD5
bf5d4b70c7953b0b13da6baa291ffbb6
-
SHA1
d08fd1125b3a6f419e0c53a0682a60197a32b748
-
SHA256
20be840bbdffc4db97a7538cb70d60558fb1d0849e465f195e9fc4fb02216635
-
SHA512
a8c4ed18f938768827c26aafb62034a91626f5901a7708710457c82019e7e23f3aec5fa2bff1acac4814c1e45ed2f96f9c41996a823094f67c2ad0cc7d75f1d8
-
SSDEEP
6144:w/TBqYe/QRa4uSh16nIO+/+is3gAALuVfmlc2OniD543Kp04Wunz:w/Ts74RL2i4gAALSmlciDG3juz
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 20be840bbdffc4db97a7538cb70d60558fb1d0849e465f195e9fc4fb02216635
Files
-
20be840bbdffc4db97a7538cb70d60558fb1d0849e465f195e9fc4fb02216635.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 887KB - Virtual size: 888KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE