Behavioral task
behavioral1
Sample
189b961d9d416dda57135d7b94ceda79.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
189b961d9d416dda57135d7b94ceda79.exe
Resource
win10v2004-20231215-en
General
-
Target
189b961d9d416dda57135d7b94ceda79
-
Size
56KB
-
MD5
189b961d9d416dda57135d7b94ceda79
-
SHA1
1dd4609087d644abc8d9b62b9fdb194bbd4e5f35
-
SHA256
35c2fd05f2610f789bd47b3bd358ef8bc95d21a10c126e8304cc64b45595ac94
-
SHA512
6a65af25d401cf7875648eb56deb6c48a87bc443622a09969fc5aa4e9c4fa30305ecdbe0882e348e00a9345426636fd30b2ad1084449e9bad8fa930536edd769
-
SSDEEP
768:EeDN1t9pqpdgvbiM4hfx26pCN/KLGbYa70+1f1bLHStMA5E9gMljXacMWfJdq7FF:Bh13/WY6UJKqbYv6d/yHbkwY5mMg
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 189b961d9d416dda57135d7b94ceda79
Files
-
189b961d9d416dda57135d7b94ceda79.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 168KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE