Behavioral task
behavioral1
Sample
30b441bad9a65c948ddb5386f3465ff1.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
30b441bad9a65c948ddb5386f3465ff1.exe
Resource
win10v2004-20231201-en
General
-
Target
30b441bad9a65c948ddb5386f3465ff1
-
Size
188KB
-
MD5
30b441bad9a65c948ddb5386f3465ff1
-
SHA1
d1f8df2c4303dc48c2b10d24282b9917fdc347fd
-
SHA256
013d8e10ea2be8c719de1460af301ab6255f6d9b0a47622ce359b501ac984cf9
-
SHA512
17b61a0c9f50657b0c65d061621f50f37ae80fb75efdd5f706c9e368171121d7ead7e3499929dfff7781eec012dbf46ba5cb71c0ff3172d9117db2f4ce3cd3c7
-
SSDEEP
768:JjEjWydZNHVzXt6aFHl2wQCjEjWydZNHVzXe6aFHl2wQ:JjEjW8HlTjEjWvHl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30b441bad9a65c948ddb5386f3465ff1
Files
-
30b441bad9a65c948ddb5386f3465ff1.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE