Behavioral task
behavioral1
Sample
187b54fd65eccbc3ef9375e30088af83.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
187b54fd65eccbc3ef9375e30088af83.exe
Resource
win10v2004-20231215-en
General
-
Target
187b54fd65eccbc3ef9375e30088af83
-
Size
318KB
-
MD5
187b54fd65eccbc3ef9375e30088af83
-
SHA1
5e8103d451663c6174d1f4b69e837763766a37bf
-
SHA256
1285ac3cb576b02a6be866e704a78b2d3f63f69a0324e811aaf7609d52c605a6
-
SHA512
127ec4ae08c49f849833e12682e3dc2849bc72b615e6c30691dc4bfc426b652e0f9caa382f6540b54b0a6e53cc54f67dff8d7f3edfce56422830fd553fd16866
-
SSDEEP
6144:hGL92ysR0Hdij2E3/ybP35LoStyuLZ6pBMAO1yemwwiG+1drJl8:h+2je9iyEPy7JcSYuN6bOsqhndrj8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 187b54fd65eccbc3ef9375e30088af83
Files
-
187b54fd65eccbc3ef9375e30088af83.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE