Behavioral task
behavioral1
Sample
320625943b4fa9c365b3a9a57a4e8ced.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
320625943b4fa9c365b3a9a57a4e8ced.exe
Resource
win10v2004-20231215-en
General
-
Target
320625943b4fa9c365b3a9a57a4e8ced
-
Size
2.5MB
-
MD5
320625943b4fa9c365b3a9a57a4e8ced
-
SHA1
4c178b5a2c93fce66ca6c5c564c081a716615b9a
-
SHA256
31d53a4e43244223e7f3f844b700c16a6979d859d9ada4db318a5627ce8217bd
-
SHA512
5fc437f2229e09a929e644ac24f63e3b9eaf0d3ef4bf44f1201fa65650ba67e9135fb5dfc5af63b53c1affdf2b015d4c30d0ebf52d96888bbc35a1523ff68f8c
-
SSDEEP
24576:3NkpUtzfZ68M3775dyR5dX9VCntnRzyW+N8Qrrqbc0ZrRqeGLUcz9uhRKbREcqLq:dJ6phxYjuylOCbd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 320625943b4fa9c365b3a9a57a4e8ced
Files
-
320625943b4fa9c365b3a9a57a4e8ced.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 6.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 159KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE