Behavioral task
behavioral1
Sample
119147281a008174cb1e7c2694ad5e45.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
119147281a008174cb1e7c2694ad5e45.exe
Resource
win10v2004-20231215-en
General
-
Target
119147281a008174cb1e7c2694ad5e45
-
Size
10.4MB
-
MD5
119147281a008174cb1e7c2694ad5e45
-
SHA1
c54e764f326dada7acd3227e7355e4f90326369c
-
SHA256
ff2a6e6c2663ae97bbc1d64eb0504980ed12611670b8c38b76cbccb2ca0e30ab
-
SHA512
83ce9a4c385355cc171fa592e4f9c19ed2603ad6f73feba82198f47ae95433e62a53db4f5164cecd218afb06ec43aa67b322a7b8c0ee873f859edf42d714b1b8
-
SSDEEP
12288:PHkVE/oSQNgp9FfsbVv3o8FsVwsl5UXnLNgp9FfsbVv3o8FsVwsl5UXnLNgp9FfN:cVobbbbbbbbbl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 119147281a008174cb1e7c2694ad5e45
Files
-
119147281a008174cb1e7c2694ad5e45.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 280KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 145KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE