Behavioral task
behavioral1
Sample
715c5b0666ea8b4f8c94fcef2e96ffe1.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
715c5b0666ea8b4f8c94fcef2e96ffe1.exe
Resource
win10v2004-20231215-en
General
-
Target
715c5b0666ea8b4f8c94fcef2e96ffe1
-
Size
2.7MB
-
MD5
715c5b0666ea8b4f8c94fcef2e96ffe1
-
SHA1
96e2265e5ae28d0ca68baa85f0cdbc960063fff2
-
SHA256
b05ed5902f22019c7b2c233ee0ad819ee03c5555bd93de6ce7907e6cc992209e
-
SHA512
9566a6f871bd63fe11cdc67b11318720b0692d925b3640b00270d105a8d583f147563aa095072aa7dc6cfa9907371d5fdab10eea44603f754f50786c301c8de5
-
SSDEEP
49152:t4EyEONBQLD9DoYyjmPA0LUPcN74NH5HUyNRcUsCVOzetdZk:ByEhRUYyjmY0LUE4HBUCczzMO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 715c5b0666ea8b4f8c94fcef2e96ffe1
Files
-
715c5b0666ea8b4f8c94fcef2e96ffe1.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE