Behavioral task
behavioral1
Sample
108c4fa71ae4d91476df490636b6ba1c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
108c4fa71ae4d91476df490636b6ba1c.exe
Resource
win10v2004-20231215-en
General
-
Target
108c4fa71ae4d91476df490636b6ba1c
-
Size
261KB
-
MD5
108c4fa71ae4d91476df490636b6ba1c
-
SHA1
ddf78b1eaa8e5256afa5656a2e87557a4d7f8769
-
SHA256
e3e75d8835fbe16ce358a090273cfd72e1b9c26d8ed354786d3bb16287f309c5
-
SHA512
0d6e20a6d18c7df4e989a7aa24ab97671be10b6c046739418985e52d5f07fb276708d0d3f3116ebb6e2bed161b2901483262aa5e02a20bc754f84d0690223e3a
-
SSDEEP
1536:T60urjZ2JvMz4R1lXI5nNgQ61AgwUOZOKc7TXyZX+6eauCW07h4:duHUJU+1l8nSCXOKcSZfuj014
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 108c4fa71ae4d91476df490636b6ba1c
Files
-
108c4fa71ae4d91476df490636b6ba1c.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 376KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 168KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE