Behavioral task
behavioral1
Sample
131eb7554a3e237f12d50bf3272f128d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
131eb7554a3e237f12d50bf3272f128d.exe
Resource
win10v2004-20231215-en
General
-
Target
131eb7554a3e237f12d50bf3272f128d
-
Size
103KB
-
MD5
131eb7554a3e237f12d50bf3272f128d
-
SHA1
50964e14180d8c460f52bc8ab6de3b490fcb9bc0
-
SHA256
31cec474deb32ef845bb71d2a465486389c1e693fab7b9d611d8ea97b9424746
-
SHA512
ea122fdb81b350ab001474f3b9b8992dcd4a2020762db0108c85e2620cf95942b7b3240e95f64d9c6e93a1d1b74618f1c90a67948b1d1588d873aa2008bfee4e
-
SSDEEP
3072:ZoS8QA0EkBeM2n3qM5yui7dptCtMFcq6jZzv9Sy:ZP1AIBg3qM5d0dKMyj9zVSy
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 131eb7554a3e237f12d50bf3272f128d
Files
-
131eb7554a3e237f12d50bf3272f128d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 620KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 142KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE