Behavioral task
behavioral1
Sample
94d19bc2bbe146e052f52c98ca32ddd2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
94d19bc2bbe146e052f52c98ca32ddd2.exe
Resource
win10v2004-20231215-en
General
-
Target
94d19bc2bbe146e052f52c98ca32ddd2
-
Size
5.3MB
-
MD5
94d19bc2bbe146e052f52c98ca32ddd2
-
SHA1
4dc40c67cb5b0c665d8371776777b0dc96a720f0
-
SHA256
7d7c2fdec53b45ff75c9bd15af0c6dae006d2b48de78f78c8909824afd788f9c
-
SHA512
32b57ebb2b6145f27a97fa53db44fdf3553e9e581478488d35da17847f6910ce27075c7e7e77a7a8868a7999867ff47f40cd2e6c76c90dfd24643fb8c40e72a3
-
SSDEEP
98304:ZQ91g0XQjsppmaE8xHUv38C5hX+Ska4HUE4YsyPcHSHUv38C5hX+Ska4Hj:691xX70v38aXMBP4Ysy0y0v38aXMBD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 94d19bc2bbe146e052f52c98ca32ddd2
Files
-
94d19bc2bbe146e052f52c98ca32ddd2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 141KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE