Behavioral task
behavioral1
Sample
81e1995f7713e9ba978b01924d18ac86.exe
Resource
win10-20231215-en
Behavioral task
behavioral2
Sample
81e1995f7713e9ba978b01924d18ac86.exe
Resource
win10v2004-20231215-en
General
-
Target
81e1995f7713e9ba978b01924d18ac86
-
Size
481KB
-
MD5
81e1995f7713e9ba978b01924d18ac86
-
SHA1
30d9626b141613b5161d881bdd44f034320b2b50
-
SHA256
04f95e59ebed36c74f2ec2bf77b84d1ebaa785accd821122df8165a5ff2e5a50
-
SHA512
7b025d3f9bfebfdf91268f2c2d201485a2d6b0f745604d92e2fd258a3c86442661790beddbd5050c25c48a12d9cdbc2648906d86426878136500a396f15a565a
-
SSDEEP
6144:7USiZTK40wbaqE7Al8jk2jcbaqE7Al8jk2jI25Tp:7UvRK4j1CVc1CVIwF
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 81e1995f7713e9ba978b01924d18ac86
Files
-
81e1995f7713e9ba978b01924d18ac86.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 496KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 77KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE