Behavioral task
behavioral1
Sample
02161bec5c42f283945e217c7bcaadf1.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
02161bec5c42f283945e217c7bcaadf1.exe
Resource
win10v2004-20231215-en
General
-
Target
02161bec5c42f283945e217c7bcaadf1
-
Size
8KB
-
MD5
02161bec5c42f283945e217c7bcaadf1
-
SHA1
7d27dabe253de48832abe1b3413896525a0d3886
-
SHA256
3c9049cca53f84f34dda037bd93a5ee98efcf65c5a5b5f014a030989f1575f7d
-
SHA512
2ab6e7cefb743be0f4d618379f75cc1c4d4a4b0f1551599c4a2c0bcc940b313162e86fe12cc907b4a0f650000aeaf94783aee5aeaedce2a7bd2d853e6abff6b9
-
SSDEEP
192:59f2Qq1NCzWisQksvEPMR3h1CZ5/OyRsJ0t/:r1WIrEcgpvVB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02161bec5c42f283945e217c7bcaadf1
Files
-
02161bec5c42f283945e217c7bcaadf1.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE