Behavioral task
behavioral1
Sample
d94925fec23283826cfbc0c78f6cca21.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
d94925fec23283826cfbc0c78f6cca21.exe
Resource
win10v2004-20231215-en
General
-
Target
d94925fec23283826cfbc0c78f6cca21
-
Size
2.7MB
-
MD5
d94925fec23283826cfbc0c78f6cca21
-
SHA1
7fb27b275c287b9334c8f3966b36e6b7d11ea644
-
SHA256
0ce8ed170b5d92104fa711d3e4817e346c5397e201afbd4b798b493515e9fdfb
-
SHA512
9b31db4ec2d9ed3905cf04c371f1fc882995ef65b1a20e423da9c2da60126242cf6f191001943835177eb941b09b2a1660fe3899f3475b90216f2059e7b1eb8c
-
SSDEEP
49152:lan0/CHp6mX5APHWiEpGaS6SzQaNfNpMdSMZvhaKbwU3Dyqg0hGq:lan0/8pfXSflEXeZ18SMNbwU3Dg+Z
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d94925fec23283826cfbc0c78f6cca21
Files
-
d94925fec23283826cfbc0c78f6cca21.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE