Behavioral task
behavioral1
Sample
113dfc34ecec2d8d6e80991bc9dd244f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
113dfc34ecec2d8d6e80991bc9dd244f.exe
Resource
win10v2004-20231222-en
General
-
Target
113dfc34ecec2d8d6e80991bc9dd244f
-
Size
1.8MB
-
MD5
113dfc34ecec2d8d6e80991bc9dd244f
-
SHA1
d5755f4ca86d99c85a1b7c1f212ecc73e0dcfb0c
-
SHA256
ca1d3aa18f79766090e984e00fd789c4c6441418b64a35641fa4167d76b34b4f
-
SHA512
06b4ede280389ecd23a37c7c160e176701a141541e3a0949c0a0b6001b6195f7116547dddbd54f76c71194728db2ec5757bb1f0c7c8262616d319e0cc98ba52c
-
SSDEEP
24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7NxqXj:SCqm2Jpr0nNM7Dus7NxS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 113dfc34ecec2d8d6e80991bc9dd244f
Files
-
113dfc34ecec2d8d6e80991bc9dd244f.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 616KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE