Behavioral task
behavioral1
Sample
13cd7e388d4cb4d14d0cde09c632fc02.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
13cd7e388d4cb4d14d0cde09c632fc02.exe
Resource
win10v2004-20231215-en
General
-
Target
13cd7e388d4cb4d14d0cde09c632fc02
-
Size
133KB
-
MD5
13cd7e388d4cb4d14d0cde09c632fc02
-
SHA1
0a4b50f79f684fa1a02888e2673448c93dac28b3
-
SHA256
7949927da956d8893f9e6ff99ebd42f8b90416cd99de8918e0200d374c61f469
-
SHA512
27417c440dc7b8468cd1e99159c474389116ee2c27b67e18beee9aae39471002d47cbd8e03f8587eca3db86ea4b3ddbf790166b5a8c1a50cd49a63f2d5d385e2
-
SSDEEP
3072:znvhTmCAlc+kist79LwVfzdYBwdpCs/NSTAYRhPHR:rhTmCAl3stdwVbdSgpCCNSTAYPHR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 13cd7e388d4cb4d14d0cde09c632fc02
Files
-
13cd7e388d4cb4d14d0cde09c632fc02.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 199KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE