Behavioral task
behavioral1
Sample
fa24e7c6777e89928afa2a0afb2fab4db854ed3887056b5a76aef42ae38c3c82.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
fa24e7c6777e89928afa2a0afb2fab4db854ed3887056b5a76aef42ae38c3c82.exe
Resource
win10v2004-20231215-en
General
-
Target
fa24e7c6777e89928afa2a0afb2fab4db854ed3887056b5a76aef42ae38c3c82
-
Size
3.9MB
-
MD5
25707725362c45ce6dcb83e57837669d
-
SHA1
ed506c968687f3668edfcde8a8f975dae0f5fadd
-
SHA256
fa24e7c6777e89928afa2a0afb2fab4db854ed3887056b5a76aef42ae38c3c82
-
SHA512
681a01e17f45ac23336eb79352a7816ec242b021db9ac2873e64b3e7b125f2901b7e710db8900daeaf4ff2af2d7506c6d8a1ebebf8b1db6b1f15246e4c38d735
-
SSDEEP
98304:5nFwdvTqoLuUTK7KEVsaL9JMYxK/z8n43jhrxPQRL:zwdvTqsuUI9TEtPe
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa24e7c6777e89928afa2a0afb2fab4db854ed3887056b5a76aef42ae38c3c82
Files
-
fa24e7c6777e89928afa2a0afb2fab4db854ed3887056b5a76aef42ae38c3c82.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 9.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3.9MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE