Behavioral task
behavioral1
Sample
15b3569605849db800e13be7d01e1940.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
15b3569605849db800e13be7d01e1940.exe
Resource
win10v2004-20231222-en
General
-
Target
15b3569605849db800e13be7d01e1940
-
Size
944KB
-
MD5
15b3569605849db800e13be7d01e1940
-
SHA1
9df7a28126d629c86f226d71e1b33ad4017d15c9
-
SHA256
fa47cb3827a3236c0a2f131e610ff18fdb5e1d00d8e5dcde038460524f9d137c
-
SHA512
dec84eb1db1e11a7af3f276e0c52922cf70f93fea9b3d6fd99d9b263eb5656f965c80e0856e1b2666c67124a35bf51a12be3f64525c66bccc10eb764f8504f1a
-
SSDEEP
24576:bTQwCPpFoiC+8Bwqf5rkn2pZ72EiEaSOYfP:XwyhrDkqf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15b3569605849db800e13be7d01e1940
Files
-
15b3569605849db800e13be7d01e1940.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 471KB - Virtual size: 472KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE