Behavioral task
behavioral1
Sample
f072d194e2c800ea30e35a1f05900819.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
f072d194e2c800ea30e35a1f05900819.exe
Resource
win10v2004-20231215-en
General
-
Target
f072d194e2c800ea30e35a1f05900819
-
Size
1003KB
-
MD5
f072d194e2c800ea30e35a1f05900819
-
SHA1
6f134f6cde6b5ece658d07e9c693181c03701ee2
-
SHA256
b8aa5d13e5d462bdba856013d622e6aad41ac8fe984e6059bc89e4106c784d5a
-
SHA512
6ccf17b098c5bc4dfd3b431ed1e8343cf398f57859da93fd5645b189e2e35bc23b14bbee2b04f82307ef832c135daf8d2824fd03c6ee4e28827ac6dd2f651a46
-
SSDEEP
12288:Jj5WgwTkIT1Q3audYKJFTJFoqLcrN0kYDD12oLyoWhur4/VrkYHIz/WUeHTmn+q6:ygG6qudHTJFBK0BDh2aPHrSVp7HT6O9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f072d194e2c800ea30e35a1f05900819
Files
-
f072d194e2c800ea30e35a1f05900819.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE