Behavioral task
behavioral1
Sample
2216ba6f44721541f05c4ca3c6bcc006.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2216ba6f44721541f05c4ca3c6bcc006.exe
Resource
win10v2004-20231215-en
General
-
Target
2216ba6f44721541f05c4ca3c6bcc006
-
Size
71KB
-
MD5
2216ba6f44721541f05c4ca3c6bcc006
-
SHA1
62e5f341a878344279e4df6dffe6a7478096ef45
-
SHA256
e764d3224da8cf11a419a9c06a0bb647e0964688c977439732dcf92dc0b01354
-
SHA512
576f2c933b2d75e3525a6d13319e9a1b94b64a90eef816c10750342b54dad9f9b219b40dec1d9bd92f9ec36561940641f6cb9732e45e1795fc742f4a816f8d5d
-
SSDEEP
1536:j9TwyTd9GmJwUx10l5iJ/EtjKczjRkBlFCTRFb:j9TwyTd5Jwg9JMjRkBULb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2216ba6f44721541f05c4ca3c6bcc006
Files
-
2216ba6f44721541f05c4ca3c6bcc006.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 348KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 428KB - Virtual size: 432KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE