Behavioral task
behavioral1
Sample
149d77f89b4616cb4f3539c207d332e7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
149d77f89b4616cb4f3539c207d332e7.exe
Resource
win10v2004-20231215-en
General
-
Target
149d77f89b4616cb4f3539c207d332e7
-
Size
1.8MB
-
MD5
149d77f89b4616cb4f3539c207d332e7
-
SHA1
ce0884104f4f90b74cc17bec80158007d51ba7b1
-
SHA256
edb6eede68e304c19ec3a9e40238b0cf1450b15b339f47cc935c61577e6ea0ed
-
SHA512
e074c2a927bf89d161aa92b4d242f4ae3f77c5898836738dea23d732ef1623d878fb01824c45281ff0b388c5786d85e21f221105403c3469c9b740bfa1a6d4aa
-
SSDEEP
24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7NxqN:SCqm2Jpr0nNM7Dus7Nx8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 149d77f89b4616cb4f3539c207d332e7
Files
-
149d77f89b4616cb4f3539c207d332e7.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 616KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE