Behavioral task
behavioral1
Sample
fd997f9e28a47a3d4bd6d416bffa1f78.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
fd997f9e28a47a3d4bd6d416bffa1f78.exe
Resource
win10v2004-20231215-en
General
-
Target
fd997f9e28a47a3d4bd6d416bffa1f78
-
Size
353KB
-
MD5
fd997f9e28a47a3d4bd6d416bffa1f78
-
SHA1
0ba8e3eea2cb67dbd253d8a910f808e02a8dc62a
-
SHA256
27d458c49af74bc296ee57a6dc30c7e868a006f8862d0cf2e1aba686045458d9
-
SHA512
82c0b52918124328cd292c12007822f46e203acccb5fc5b16a6ef5651ccd944c3a24fb8a5397108272455d7d125f5de24759d62deef4ccadff896ecb96fda70a
-
SSDEEP
6144:9jacbCjnjSVXrU14WmWb/XLngBOHxfYgYdxfsLPrPwo+:RDbCjjSVm7mSbgBOHXYTfmE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd997f9e28a47a3d4bd6d416bffa1f78
Files
-
fd997f9e28a47a3d4bd6d416bffa1f78.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 604KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 201KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE