Behavioral task
behavioral1
Sample
f13c7127b510663e664078269ebe77af.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
f13c7127b510663e664078269ebe77af.exe
Resource
win10v2004-20231215-en
General
-
Target
f13c7127b510663e664078269ebe77af
-
Size
133KB
-
MD5
f13c7127b510663e664078269ebe77af
-
SHA1
045e1f57590f4a67b6754956c13504e337e4c98c
-
SHA256
b0a760e8e165a41e08f9dcc53c76969d10d9060cfa5490c59491f5520e4ffdb5
-
SHA512
911f58a77e5c46afec9f4a8e4c0f16562a81588aa64665c606c247d8d19f6eb735193ea75d9b8fdedb99c6dfbb37304205772324333d9c5b87cec36d3af8e5fb
-
SSDEEP
3072:3Wmye465cBDMZSRLkzsb0TK2FEwP/4cpPpzjoLGHoYCCQ:3Jye46S1+0MsaEq4Oo2zQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f13c7127b510663e664078269ebe77af
Files
-
f13c7127b510663e664078269ebe77af.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE