Behavioral task
behavioral1
Sample
261c417d06a84f6c343a44591f2219a8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
261c417d06a84f6c343a44591f2219a8.exe
Resource
win10v2004-20231215-en
General
-
Target
261c417d06a84f6c343a44591f2219a8
-
Size
103KB
-
MD5
261c417d06a84f6c343a44591f2219a8
-
SHA1
af68987bd0d6a8efdba5e312ca90aa92074ce89c
-
SHA256
e0ba5127a3a2ac53ff40a7777d9309c37226ec4c5883412cc06b10a1591a6d3e
-
SHA512
2ff680e187d72a482376c5f86b67622de1c33c7d1a05d6aff40ecc31aebc84114b538c30f01c4f810653d0172fa31fc9edaa9a37a7d4ab1901f6e7856211094e
-
SSDEEP
1536:v5L8KcX7dndItXqj4K/UDxXOx/72e71W0Ig78FDRHRBsE1T89L2AlhDU9t1J5j3c:iKM7rW6h/U98MWI3LzTsCAc9t5jHs
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 261c417d06a84f6c343a44591f2219a8
Files
-
261c417d06a84f6c343a44591f2219a8.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 304KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 218KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE