Behavioral task
behavioral1
Sample
ad9291c7332797af4c4624db53861203.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
ad9291c7332797af4c4624db53861203.exe
Resource
win10v2004-20231215-en
General
-
Target
ad9291c7332797af4c4624db53861203
-
Size
133KB
-
MD5
ad9291c7332797af4c4624db53861203
-
SHA1
fdbf66639403ed4072623626a389b817fde8cd4e
-
SHA256
214f16ab034b30be1e19fd36a48d915e40f6fe062aff305188940d6cf716384d
-
SHA512
439d8ecb48307dcdbe0dab4e9b87a7c9034272de23d8cc684b1828fc32ad40e32bd822a196d2468ab331a5b0ee39d4969a3bedd38569a8dbf458db47deb9f1bd
-
SSDEEP
3072:63kls3XIgB4GFkYj6faD7f5PVWWGJMTuunF14iB5I1Y+6NI4SQ:6klsH4Sk7fexPglOTuuF1vDL+9BQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ad9291c7332797af4c4624db53861203
Files
-
ad9291c7332797af4c4624db53861203.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE