Behavioral task
behavioral1
Sample
345e363f40992cfdb67c9c61632ce998.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
345e363f40992cfdb67c9c61632ce998.exe
Resource
win10v2004-20231215-en
General
-
Target
345e363f40992cfdb67c9c61632ce998
-
Size
189KB
-
MD5
345e363f40992cfdb67c9c61632ce998
-
SHA1
fb481eb3d7a84e7112d9e87f981d59ad32eebff5
-
SHA256
79852d84caf1c4e362f40ca1c2465bdf8d0be1b63bbec76a052cd271d23114ab
-
SHA512
9c3eb4e0965fc081280f42b4b564774e499239fb07ccafe1034faa2569d800af77316e523182da175788a60c56946909ed3d6ed8fc421fdfe47175c4fdd74710
-
SSDEEP
3072:vQYKgn4BjUvLHopV4AUIHf4b/kUpcGEMVrK5aGxustRfVBooVj06jSgha6RTszjc:vrKg4ZUvbqVoWfO/HeWrDMpom0exRAsP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 345e363f40992cfdb67c9c61632ce998
Files
-
345e363f40992cfdb67c9c61632ce998.exe windows:9 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 144KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 185KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE