Behavioral task
behavioral1
Sample
154420ccf1c55c9fc8eb615bcddee209.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
154420ccf1c55c9fc8eb615bcddee209.exe
Resource
win10v2004-20231222-en
General
-
Target
154420ccf1c55c9fc8eb615bcddee209
-
Size
340KB
-
MD5
154420ccf1c55c9fc8eb615bcddee209
-
SHA1
e7c4349a123c7816051166287590a469d424ccdf
-
SHA256
e2b082ce1b3703fb12506700a1a0c565e6edb2257af6e913ce541c2ccb857a75
-
SHA512
5f9d43032667525d76692ecd8a41faedf624a19559f44a4598e7f713054b6de0ba9439b4ec02dfea26083f7f3f85b890693153323c519afe51c84932e4b1609b
-
SSDEEP
6144:MzIHv+Wki0WI1e9WKVQ4XUfTVt2Dn1s/bHwtDv2cZCn730ldxeSLTIVEQo1:MI7d0WIo9WyQ4ST32DnC/bi1rdBaB2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 154420ccf1c55c9fc8eb615bcddee209
Files
-
154420ccf1c55c9fc8eb615bcddee209.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 878KB - Virtual size: 880KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE