Behavioral task
behavioral1
Sample
116a5bfdece5245767f850840aeaabd2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
116a5bfdece5245767f850840aeaabd2.exe
Resource
win10v2004-20231215-en
General
-
Target
116a5bfdece5245767f850840aeaabd2
-
Size
5KB
-
MD5
116a5bfdece5245767f850840aeaabd2
-
SHA1
e1130c1d4b561e10f83cdc69949d52d69f3b1b7a
-
SHA256
e13a94165b182d6e89c361687e544771077f99534898f32e3834959bcd4ba27f
-
SHA512
a31fd1680836d5553b3422d04bc50c47016cb714e807b6d3bdbe540168562c14e039e5be2530cd5ed65f051ade44b05d1ae9ad0e4fd8b5425487da2afb693b63
-
SSDEEP
96:my9fhcMDph5mgoyRP7hQKUnYS51/D/ITX7PJPn8ksGFXby6WzP0Jnm2Oz:vfXuylOKUnY61/D/ITX7PF8TG1y6kP0m
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 116a5bfdece5245767f850840aeaabd2
Files
-
116a5bfdece5245767f850840aeaabd2.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE