Behavioral task
behavioral1
Sample
11097e47dda401eca9fc1b19d5574149.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
11097e47dda401eca9fc1b19d5574149.exe
Resource
win10v2004-20231222-en
General
-
Target
11097e47dda401eca9fc1b19d5574149
-
Size
469KB
-
MD5
11097e47dda401eca9fc1b19d5574149
-
SHA1
8b0b2a1c86de3245e9fa1bbb63c5414dfca555c1
-
SHA256
871fc7686f964b592a22be6dc2cdba357c6552cd657f01da69af4cc2c12f4ea5
-
SHA512
43a9ec8936d6ef90a04e4f47fc303ff0d76edaadd27571bf6e6224098468c2d7c429414d09d8372b95de81df4c2ecf885dda6c25ca7754a581440206ccb930e0
-
SSDEEP
6144:m6f/84pSDFmVds7dR9kmYiuH6lhfQZ42jvvpxC8VtnGn7mjZQFwhk:j/7SD+dshRemDSZ5vvtVwnseFX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 11097e47dda401eca9fc1b19d5574149
Files
-
11097e47dda401eca9fc1b19d5574149.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 190KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE