Behavioral task
behavioral1
Sample
14a93e938d5b3b5fcd6e931169cfe816.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
14a93e938d5b3b5fcd6e931169cfe816.exe
Resource
win10v2004-20231215-en
General
-
Target
14a93e938d5b3b5fcd6e931169cfe816
-
Size
10KB
-
MD5
14a93e938d5b3b5fcd6e931169cfe816
-
SHA1
91e206482c4a29f3b607adaaf9dcddbacc026e61
-
SHA256
e53e5b75b91571d02663e196ccfb41c17b533c29675e3527f9079844720153e4
-
SHA512
b192fac1a2e79c806ffec3d27af3e04da1d69554e83b173f26c0db279b7040fd351a8fa19c256211805317f59e371d97603a8ea78b9dc3d6c29975f8a9b113b8
-
SSDEEP
192:8v++bh6FaNoASiwRRH1su+zbv8a8BhO3RQVmWTBRlJDL9OYvZae:63bLNsZbs5oa7+l1RHNnvZae
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14a93e938d5b3b5fcd6e931169cfe816
Files
-
14a93e938d5b3b5fcd6e931169cfe816.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 196KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 148KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE