Behavioral task
behavioral1
Sample
816fcdfb5f52ed5aafef3f522d3f8841.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
816fcdfb5f52ed5aafef3f522d3f8841.exe
Resource
win10v2004-20231215-en
General
-
Target
816fcdfb5f52ed5aafef3f522d3f8841
-
Size
1.5MB
-
MD5
816fcdfb5f52ed5aafef3f522d3f8841
-
SHA1
20010646ad19fb484e9aa2cde5cee89ad675a9be
-
SHA256
229d8b252dc34736871a05180ab71ab0c96b534d09dced47d62df2684a8e18e9
-
SHA512
0f3162e9fd74bc73433f1e63f2547d5a162ed0cd2ec31c0bef73f80a9261502430ffa62e070ea0cf5e02ec36b77725f281962b1a384bdec4c16e6c8f49bcd9e2
-
SSDEEP
24576:pKx4yD47WmsWhX97Tc8l6vX2h+MljAYfTkIaEqDf51D2I0S1Mi7dW:pKx4yD6VVgKfFfiff5mi5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 816fcdfb5f52ed5aafef3f522d3f8841
Files
-
816fcdfb5f52ed5aafef3f522d3f8841.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE