Behavioral task
behavioral1
Sample
a23ff4350487c49f2f264fadcf5247ab.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
a23ff4350487c49f2f264fadcf5247ab.exe
Resource
win10v2004-20231222-en
General
-
Target
a23ff4350487c49f2f264fadcf5247ab
-
Size
2.0MB
-
MD5
a23ff4350487c49f2f264fadcf5247ab
-
SHA1
755db2157912c9fa3530d42022f7cdea2c30d3b0
-
SHA256
32722af896670c8739c3956ef1860873181ee12812fc508cbfdc055c0098447f
-
SHA512
b338571f7a122c7560d5bfd54bae272b60bd9ca77b4d4ad5e0ff29e99b8c37ff0c3be387946152f96751b023059a892f0fbe6b50d1f083428bb3c35759d326db
-
SSDEEP
49152:Qhw/IIXB41zdkaglxTcN+9zWFULG+WculXWgEoi4tGN2noQcN+9zWFULG+:3tKdkagroA9zyULG+WculXWgEo6Ino1Q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a23ff4350487c49f2f264fadcf5247ab
Files
-
a23ff4350487c49f2f264fadcf5247ab.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE