Behavioral task
behavioral1
Sample
31bc2dd120965b0b410b2a305d9ab51b.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
31bc2dd120965b0b410b2a305d9ab51b.exe
Resource
win10v2004-20231215-en
General
-
Target
31bc2dd120965b0b410b2a305d9ab51b
-
Size
433KB
-
MD5
31bc2dd120965b0b410b2a305d9ab51b
-
SHA1
9053dd7265dd05e1f11a99443396d8a936a42657
-
SHA256
d477ae313cbd9c0d5a5d2732bf77a6a49f28d84f46c58d0230f386ccd1d0572a
-
SHA512
a6775e275fab7f9fece0512afbcb69bb06a8539abb7d4c03ce86b603744602bb8b774a001fb4378b6e675a450cfe659229b8fc11a89182bea55ee5a44088b1df
-
SSDEEP
6144:KlredaxqPG1qcuAe75e7ultbn/DHwQAOjk+Re0mFSzTBA9nMI2phbkYu:KpegxqPEoY7ultbn/VAVxSzTCn/Y5u
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 31bc2dd120965b0b410b2a305d9ab51b
Files
-
31bc2dd120965b0b410b2a305d9ab51b.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 161KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE