Behavioral task
behavioral1
Sample
a714267c6027ccd2813e017f3da1167b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
a714267c6027ccd2813e017f3da1167b.exe
Resource
win10v2004-20231215-en
General
-
Target
a714267c6027ccd2813e017f3da1167b
-
Size
39KB
-
MD5
a714267c6027ccd2813e017f3da1167b
-
SHA1
6b62394f05778679020a77d81379b5594645556f
-
SHA256
9c14ba5e4ed8679feef1a4653b18d5a82f78b63a0535cda6144aa6ef967f1052
-
SHA512
159852d1f02fb75b07f444e20c1c992545c4c9fc0951d616d84d582aa2324b91ae9289d895545f4f4fcf79a04111222fed670fb97e0f82d2d10bcfcdefc3b845
-
SSDEEP
384:MZcaoPBXkIq5ozV/EYSfyoj464UGoqxrH:MiPPTYiNofyoj4lUGTL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a714267c6027ccd2813e017f3da1167b
Files
-
a714267c6027ccd2813e017f3da1167b.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE