Behavioral task
behavioral1
Sample
f264fde0a75e4c5be4d744721aab0bae.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
f264fde0a75e4c5be4d744721aab0bae.exe
Resource
win10v2004-20231215-en
General
-
Target
f264fde0a75e4c5be4d744721aab0bae
-
Size
3.9MB
-
MD5
f264fde0a75e4c5be4d744721aab0bae
-
SHA1
582bcb356dce310b577166f82bf4f001a451516e
-
SHA256
ab20ab68ab67761d605ae3f8740d762cdb9e7232bd619b2dbb4849015f7c8ac1
-
SHA512
76448630359b93fbbe57ddc7cb71440787fa7a2e6cb10c4715916b96516419c3f7cdd0f2d431f91d50f76c2c2e1d253ecf1f63e13590a5661869acaefce2b56a
-
SSDEEP
98304:UEgr0WsNA9zyULG+AsMoxvYNZeuA9zyULG+Awgsb4OkQA9zyULG+AsMoxvYNZeuQ:fggczLqe90IzLqWg5VdzLqe90IzLq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f264fde0a75e4c5be4d744721aab0bae
Files
-
f264fde0a75e4c5be4d744721aab0bae.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE