Behavioral task
behavioral1
Sample
fda31dcd954f6e24823a73ff8ab58655.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
fda31dcd954f6e24823a73ff8ab58655.exe
Resource
win10v2004-20231215-en
General
-
Target
fda31dcd954f6e24823a73ff8ab58655
-
Size
1.2MB
-
MD5
fda31dcd954f6e24823a73ff8ab58655
-
SHA1
5b22c332964f53af0f1c73bc80e9cc0ee06c41ca
-
SHA256
172704301debc71d30f1455fa9d059c582754049d740ca6e3644bee437ae4434
-
SHA512
318b8660fe73638924de0aabb6f6f0e6f84d632761ce38176e32c53228904e422ee7c665c9c07e2449da40c1cf53df8e77eabf4e59d7c7ba50fd1c62068c6397
-
SSDEEP
24576:A82U3PY/cA5kKeLMxX5w+BhUn0BQn7HI1MkKeLMxX5w:v5/Y/ciXeYLwOWnnjXeYLw
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fda31dcd954f6e24823a73ff8ab58655
Files
-
fda31dcd954f6e24823a73ff8ab58655.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE