Behavioral task
behavioral1
Sample
28099adc6cdadb213e6c11bfff687d61.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
28099adc6cdadb213e6c11bfff687d61.exe
Resource
win10v2004-20231201-en
General
-
Target
28099adc6cdadb213e6c11bfff687d61
-
Size
605KB
-
MD5
28099adc6cdadb213e6c11bfff687d61
-
SHA1
ae74eb022e16c8225d8705abf106914b046445c5
-
SHA256
7933cb68414694b38ac8b29e14324a70edfc42ea787b3ff56a7cba6be9ae3082
-
SHA512
8de9e19bebbb89d288fe1d56835de34283a7fd33331f247d2b19c34e20d6cf7fa98340b4a9a7e78cf477725e20df96a2ae345a50feafc719d3bd9f9e79e65294
-
SSDEEP
12288:FvpdEMCBezWscHUFTYFJU6UNm6B6zWafdzm:HdEMgo+UFTEm4/zfl6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28099adc6cdadb213e6c11bfff687d61
Files
-
28099adc6cdadb213e6c11bfff687d61.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE