Behavioral task
behavioral1
Sample
12202463465d76a03f51663eb2eda726.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
12202463465d76a03f51663eb2eda726.exe
Resource
win10v2004-20231215-en
General
-
Target
12202463465d76a03f51663eb2eda726
-
Size
472KB
-
MD5
12202463465d76a03f51663eb2eda726
-
SHA1
d841dd7903640c4f275ebf07ac71a665cc46c1ac
-
SHA256
e09391ea5ccfd6ea2a07e8dd41cdb559f14567898e5c2ff5c09ea13163d75e4a
-
SHA512
fbe14040769442150efc0ba508386ec962778163a53206406f160497adeeadca660b9fe2f1073d35fa1c3ce13d00bbd290dcd50a10febd26d7684e9419cc4883
-
SSDEEP
6144:ilPy2bbpM+16q6HQoGBXVNYbQHMF3oU68P6WcOLw0mkP/4WbYxljHR0R:DmS+1yHYRVNYPE8P6bOL/AoYTjx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 12202463465d76a03f51663eb2eda726
Files
-
12202463465d76a03f51663eb2eda726.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 188KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE