Behavioral task
behavioral1
Sample
79f8a6855bff25672d8de0eb51b794ca.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
79f8a6855bff25672d8de0eb51b794ca.exe
Resource
win10v2004-20231215-en
General
-
Target
79f8a6855bff25672d8de0eb51b794ca
-
Size
1.5MB
-
MD5
79f8a6855bff25672d8de0eb51b794ca
-
SHA1
833dd25b7df608612b1e92979076c8f92e40fe84
-
SHA256
4a51d475a21dd8cc4d62d8b665b13dcf95c18ca9830f528092236fc8303b3cfa
-
SHA512
ced9d2a7fb781325ae970af597c0bc7a0d951e7ce8d035b2bf9b7f83b5c3ec67a2a8243dd2d66d5fabd908c66bf3b3efc88be312d4ca9dbd69f09edeecdf63a5
-
SSDEEP
24576:JsG0fR6HHfS/cG6cplv/cjukL2ZEN2TinYbR+FNvXU7cjukL2Y:JsHfR6HHfST6Qlv/cakLiIwinYb4FBUy
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 79f8a6855bff25672d8de0eb51b794ca
Files
-
79f8a6855bff25672d8de0eb51b794ca.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE