Behavioral task
behavioral1
Sample
94dbb2fb258f42b47684c9cb337ba9dc8e860f645dc42722ea498b3de3c9aef5.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
94dbb2fb258f42b47684c9cb337ba9dc8e860f645dc42722ea498b3de3c9aef5.exe
Resource
win10v2004-20231023-en
General
-
Target
94dbb2fb258f42b47684c9cb337ba9dc8e860f645dc42722ea498b3de3c9aef5
-
Size
27KB
-
MD5
fcdb3385b2a24476a69a1bcc3dbc80ac
-
SHA1
13e53c15143926070730fffb9ffe1dfcb85b981f
-
SHA256
94dbb2fb258f42b47684c9cb337ba9dc8e860f645dc42722ea498b3de3c9aef5
-
SHA512
eeded15418ebf62d2a6a9d7cad7b9dc9349633285d41a02c8f112782c7ef0ad08cd4463a22a48547fa1a378db1fefc3b7d96358d01eea4aeceef77b9950068d6
-
SSDEEP
192:LvBJqAPhpeS1ZK8O3CDHIbzMZlbv110GPdYPmVI+UGj8C+RPj3dkUV0lfgZxKn2:9UAPopMZlB5P6d+UkSDqPlIZQ2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 94dbb2fb258f42b47684c9cb337ba9dc8e860f645dc42722ea498b3de3c9aef5
Files
-
94dbb2fb258f42b47684c9cb337ba9dc8e860f645dc42722ea498b3de3c9aef5.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE