Behavioral task
behavioral1
Sample
179fae890b3396e29e90d41e1b2179c4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
179fae890b3396e29e90d41e1b2179c4.exe
Resource
win10v2004-20231215-en
General
-
Target
179fae890b3396e29e90d41e1b2179c4
-
Size
8KB
-
MD5
179fae890b3396e29e90d41e1b2179c4
-
SHA1
277a0432eda00dcacdcc6eb12f2db5de9cdf3246
-
SHA256
c183e8ae623ffbbf4e5dadd5c2af1d38e29f7ab4e4cb10f5a9295286cda20030
-
SHA512
12c8dd4e26d0c64e9a6125dfbb9e1cc02ea1900ff92882b247ecb3c38d0712264b50c074897984737cf2e15a4801f395ef43971d0a963daf0dbff951c991c7e0
-
SSDEEP
192:OSd4Nj2KPQhfRvT1VteznfqWS9b1TkPBjyW2jpcP:OSWNPQ5V+fjS9pT6BX8pa
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 179fae890b3396e29e90d41e1b2179c4
Files
-
179fae890b3396e29e90d41e1b2179c4.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE