Behavioral task
behavioral1
Sample
334df5b2e6fcbe7ee6fb7271077b77b318c2c389513de34a40696aa1c28fd71f.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
334df5b2e6fcbe7ee6fb7271077b77b318c2c389513de34a40696aa1c28fd71f.exe
Resource
win10v2004-20231023-en
General
-
Target
334df5b2e6fcbe7ee6fb7271077b77b318c2c389513de34a40696aa1c28fd71f
-
Size
999KB
-
MD5
de5cedcdc9ed543e5efb109022188d18
-
SHA1
1a80cf3989c9b31dba92a66ed3bcc9f4ae8388fb
-
SHA256
334df5b2e6fcbe7ee6fb7271077b77b318c2c389513de34a40696aa1c28fd71f
-
SHA512
d18c21b3f6d1a1915d5a423289fb25de9b649fbbf017b89dbcb36c31e0c4950bc2462181d3f6ed822122ebc833fd67c2df021e90144cce6108537ef1812e44be
-
SSDEEP
24576:F3mSP1MF89iQ0G2MuriR9wqfoy+M4V1Q18MTtf/+U+TFlRdaAk:FzPOFQ0D1I9lfX9V8MTtf/+5FlRRk
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 334df5b2e6fcbe7ee6fb7271077b77b318c2c389513de34a40696aa1c28fd71f
Files
-
334df5b2e6fcbe7ee6fb7271077b77b318c2c389513de34a40696aa1c28fd71f.exe windows:6 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 920KB - Virtual size: 924KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 70KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE