Behavioral task
behavioral1
Sample
205994d57d80f37cbed778295e68ccf7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
205994d57d80f37cbed778295e68ccf7.exe
Resource
win10v2004-20231222-en
General
-
Target
205994d57d80f37cbed778295e68ccf7
-
Size
5KB
-
MD5
205994d57d80f37cbed778295e68ccf7
-
SHA1
77af22fa98405df934d5eb3ee664ee221c5c14b7
-
SHA256
e32f671ae5be4922a536e5d5410b133248c1d1b063dbe1a35b01dba78961d40a
-
SHA512
9f40517690482ff9cf66bc8c65cd27f6a7f9c218debd320e48e4c8c95d1f8c5d3e8ba8e0b94f6d0e02b1d14741716a2ee5ca56858fda0a6d8feaa575fdf055b6
-
SSDEEP
96:s6Fs1Cwr2QS4wUe4Yz8USLnmrKKH5ET2K5obCLqIafUO5wrLJ6X7x:s6F0CwrznC4UOnmrVH5ETF5obfIaf36c
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 205994d57d80f37cbed778295e68ccf7
Files
-
205994d57d80f37cbed778295e68ccf7.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE