Behavioral task
behavioral1
Sample
300e925c8681503377ce09f3053e8989.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
300e925c8681503377ce09f3053e8989.exe
Resource
win10v2004-20231215-en
General
-
Target
300e925c8681503377ce09f3053e8989
-
Size
367KB
-
MD5
300e925c8681503377ce09f3053e8989
-
SHA1
a910102acd7233c121c9b91c69e6d1bb21fd70d2
-
SHA256
545e5f50fdb4deb859a66e1d9852306b4bc624c6fad8d68e8a893191b087c474
-
SHA512
997ee9b9e913c288838e840f9dbcf6c407a683c1ebec9b9fabd1f098d27a854aacbf0d37c70a08f11fb0576fdf8d4f10209fcd8e0f6de668e988c8aa97e6c5ab
-
SSDEEP
6144:mjXwnEmi5ruYQ6hQ1nqrZDvW6paKICircquGeStLvwL+u:A03urQ6hBZDueB07uGeBLp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 300e925c8681503377ce09f3053e8989
Files
-
300e925c8681503377ce09f3053e8989.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 21.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 872KB - Virtual size: 872KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE