Behavioral task
behavioral1
Sample
02e7c64013e36a9fbd35e71ee4081562.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
02e7c64013e36a9fbd35e71ee4081562.exe
Resource
win10v2004-20231215-en
General
-
Target
02e7c64013e36a9fbd35e71ee4081562
-
Size
166KB
-
MD5
02e7c64013e36a9fbd35e71ee4081562
-
SHA1
3bd68e3e5b9b874bc967c5ab4b77ca89a685d353
-
SHA256
d3a6f9b2628fb8acb56e01c88c8105026b3ad78e6300567c052fab41ff90df51
-
SHA512
77d23cd4f592d051b7b56534455411d84b4dc5c0625d3265a5a4fc8ed77c6c0f46f3c28309a66695a6f9dc5706ba69c9e6caf54b3f7b42d68f56b2fcdb2db9b1
-
SSDEEP
3072:XWikvOpcR7mE2o4TDylo36p+Tw4KUMkZFEXlPAPMIr6ZF01PTsn41+6pnKqEX0ZT:AO+R7mE2o4TDylo36p+Tw4KUMkZFEXl/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02e7c64013e36a9fbd35e71ee4081562
Files
-
02e7c64013e36a9fbd35e71ee4081562.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE