Behavioral task
behavioral1
Sample
13c34c9c5f2b6d3a1d225f7b08da0ce8.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
13c34c9c5f2b6d3a1d225f7b08da0ce8.exe
Resource
win10v2004-20231215-en
General
-
Target
13c34c9c5f2b6d3a1d225f7b08da0ce8
-
Size
5KB
-
MD5
13c34c9c5f2b6d3a1d225f7b08da0ce8
-
SHA1
79a83764e29692d5efc2bdafc4308493a575c7e6
-
SHA256
dc34257405c8edabc8acd659ea4d9d521485e6a9c158c4ac9183f68eb28fade3
-
SHA512
9819929a28e909351361261f0da4c72f98dcd4b6f220a7fe6384563f72e07f16f91e3c6cb9738d43ba6dc50bd7aec5f4c619ad6764f8f2d6b2f2e78dfc979f41
-
SSDEEP
96:sJ+pHlXjwyE0VT5SsMhlefpqtGQZ+xgAPKzCq4am7EOcBAqUjXbbwgHz4u6e80h:sJelzVEaYsWleVQ0GAPzq4GNeb8gHH8+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 13c34c9c5f2b6d3a1d225f7b08da0ce8
Files
-
13c34c9c5f2b6d3a1d225f7b08da0ce8.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE