Behavioral task
behavioral1
Sample
149adade60d03630653cec38dfce63cb.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
149adade60d03630653cec38dfce63cb.exe
Resource
win10v2004-20231201-en
General
-
Target
149adade60d03630653cec38dfce63cb
-
Size
784KB
-
MD5
149adade60d03630653cec38dfce63cb
-
SHA1
530c635b238c27e5d9b32e8137e9b6daf8b659fe
-
SHA256
dfa68804db3aa129e2366a68162543ec93c4e6d98882567077869e5400581e2b
-
SHA512
7e9b5a7a4d46753c9777c6ef506289d8c81d3112f6b008259576da705925653fab978e7bdb6fec002154235a0ea36c422f86b973cfe551de051e0052ee806155
-
SSDEEP
24576:fhBWdCQwXlYIAWPk14JidOZTnCLxSexDPPiTpKJ3:J8dslq0k14JigTnCNSaDPPi9Kl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 149adade60d03630653cec38dfce63cb
Files
-
149adade60d03630653cec38dfce63cb.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE