Behavioral task
behavioral1
Sample
023434d7a5e21b7e86a52f7ae0e479e6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
023434d7a5e21b7e86a52f7ae0e479e6.exe
Resource
win10v2004-20231215-en
General
-
Target
023434d7a5e21b7e86a52f7ae0e479e6
-
Size
905KB
-
MD5
023434d7a5e21b7e86a52f7ae0e479e6
-
SHA1
5b3010deab29cb181a42295e2b77363afbe986e6
-
SHA256
cb753ba001588fb2232e51a71ab7d03c482f2082f9e86aac2137a0b6dfeee02c
-
SHA512
008b35183943e3cec75d04222f8271d202ccd01b51a2e1443349ad1d1de4ecdcb9c60bec823b83abe82e8a9ac2b943e54ff5856a9170647620c60e40f3af051d
-
SSDEEP
24576:qhVOEgwz56kOz96rGUkhqG16jYafDcfib0yw34bbWQ:yVOstPoCWafDhb0Z4uQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 023434d7a5e21b7e86a52f7ae0e479e6
Files
-
023434d7a5e21b7e86a52f7ae0e479e6.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 1.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 876KB - Virtual size: 880KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE