Behavioral task
behavioral1
Sample
de203f055a5b70687e119cac6a49129f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
de203f055a5b70687e119cac6a49129f.exe
Resource
win10v2004-20231215-en
General
-
Target
de203f055a5b70687e119cac6a49129f
-
Size
3.2MB
-
MD5
de203f055a5b70687e119cac6a49129f
-
SHA1
5325f6aa0331ca8d9210a2078c2bdcebfc5c5c8b
-
SHA256
d9b495db739415192ef959bace24554c287bc1249cb2e45e2d690da960e7422c
-
SHA512
b4cc020b0af3ca759128a7cf547a1a6659bc4cda17660c25eafa4b4e4c7bce07deae15328311922400b1e882fe4dc4ee3ec572878abb8075269eaf24c1f62b54
-
SSDEEP
98304:+AA7cPi7w7cakc2G6pfFmcakcVM1uT64I0qKCYtUcakc2G6pfFmcakcO:+x7qdlAfcdlVM1um487mUdlAfcdlO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de203f055a5b70687e119cac6a49129f
Files
-
de203f055a5b70687e119cac6a49129f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE