Behavioral task
behavioral1
Sample
17cf7d949076115c950acda9ba94cf0e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
17cf7d949076115c950acda9ba94cf0e.exe
Resource
win10v2004-20231215-en
General
-
Target
17cf7d949076115c950acda9ba94cf0e
-
Size
947KB
-
MD5
17cf7d949076115c950acda9ba94cf0e
-
SHA1
d1a26937b3bb4053d1641f3787fffc8d469955fd
-
SHA256
cf2e30cc4df5d62c5dbbc40f073e066bb33c67e8ec5dd22c56ef282ba51a0e8d
-
SHA512
ead2a2bd73251d0c2bb13e95e7c03e2d9aff12d9e30e2cba980b405aa64e5a259a6d896159baadcb1ce338e0082dc0b1c7c77aa6a1b0a2a4b89c77ffec9b7861
-
SSDEEP
24576:d3eqvpBoo5X4m72io6KtxGFoxgzOwvnU6CKHTr:JvRO4FoWz1vnuKHTr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17cf7d949076115c950acda9ba94cf0e
Files
-
17cf7d949076115c950acda9ba94cf0e.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 4.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 917KB - Virtual size: 920KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE