Behavioral task
behavioral1
Sample
f87d5e4ba6835d82ef24c5f932e7ab98956cc189d130f64c204005d8f9e52bdd.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
f87d5e4ba6835d82ef24c5f932e7ab98956cc189d130f64c204005d8f9e52bdd.exe
Resource
win10v2004-20231023-en
General
-
Target
f87d5e4ba6835d82ef24c5f932e7ab98956cc189d130f64c204005d8f9e52bdd
-
Size
53KB
-
MD5
a4af2e0506eb980e0bdfa13784e3b272
-
SHA1
6f083374c3b5a53091af74ae3d2275d25d32ff2e
-
SHA256
f87d5e4ba6835d82ef24c5f932e7ab98956cc189d130f64c204005d8f9e52bdd
-
SHA512
af6180bb7dab2757baa7333ecab85fcfcdb39e35a35b3dc4957734c8958e9d050085bc1f05b42ddff8dee1e2a1eda8133bb3a965caee2c0353352dba4cbfaaf6
-
SSDEEP
768:CuOzzKegNWasTjYwNFNLn9WIK+1hQTkN6CKbB688hBY7FY+7NhfvCuMh:2aesWNTdZn9xKgYCKbBWhBYz7rqh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f87d5e4ba6835d82ef24c5f932e7ab98956cc189d130f64c204005d8f9e52bdd
Files
-
f87d5e4ba6835d82ef24c5f932e7ab98956cc189d130f64c204005d8f9e52bdd.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 112KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX3 Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE