Behavioral task
behavioral1
Sample
215384f3e386419d904d9b4d45fd0ba9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
215384f3e386419d904d9b4d45fd0ba9.exe
Resource
win10v2004-20231215-en
General
-
Target
215384f3e386419d904d9b4d45fd0ba9
-
Size
203KB
-
MD5
215384f3e386419d904d9b4d45fd0ba9
-
SHA1
0a7fa5ce661619306c57d9fd98a18a266e7c8428
-
SHA256
e03569d00c999e04d6f179a59dd06b08cef681339bc81794c6a0c7ea2b41df59
-
SHA512
fbdb31dab7514f6b34d5f6b246d561f2cec3dfdb47588f31faf9c116111a960651106f8270f89448b31e0e0c22a9f2c785ec4eefb214a7f6b542da85ec983ceb
-
SSDEEP
6144:7wpY4K5KZ6U4Sf0X7nyIaDrapWf2rCbsaxPTGT:kSh5KZB4Sf0XWLqpWf2mbscPT8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 215384f3e386419d904d9b4d45fd0ba9
Files
-
215384f3e386419d904d9b4d45fd0ba9.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 241KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE