Behavioral task
behavioral1
Sample
791b5d254d26c587d6ed6a85ed95c680.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
791b5d254d26c587d6ed6a85ed95c680.exe
Resource
win10v2004-20231215-en
General
-
Target
791b5d254d26c587d6ed6a85ed95c680
-
Size
2.0MB
-
MD5
791b5d254d26c587d6ed6a85ed95c680
-
SHA1
4ac10b0d90e40b56bcfca407bff107541687df53
-
SHA256
adea4fca625dd47fb7188c900a76eea4ffab31e952e129bd0775646ad1241e1c
-
SHA512
ae86d2e16f144699eb08c64b58405f70e3a0150c88dbb5b0f07e232637cd0bcb20ab541225acb2af9c07a9ed25b7aa9f10df4c5797b03f276e69719685a643e2
-
SSDEEP
49152:RKYR/IJMIM9jwBlXd3sToyPc0DpidVpO8xplMIM9jwBlXd3s:RT/IJM9cB51Drsi7pXxplM9cB51
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 791b5d254d26c587d6ed6a85ed95c680
Files
-
791b5d254d26c587d6ed6a85ed95c680.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE