Behavioral task
behavioral1
Sample
337298127bcff73d175a4f83fb6d105c.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
337298127bcff73d175a4f83fb6d105c.exe
Resource
win10v2004-20231215-en
General
-
Target
337298127bcff73d175a4f83fb6d105c
-
Size
1.8MB
-
MD5
337298127bcff73d175a4f83fb6d105c
-
SHA1
09c99c78f6b6ccdc2359eef827f8e9cceccdfaf1
-
SHA256
1d2c94b42bcfee5f79f33e2dbcb62cec90a9c95019cc2ba4d0d87c30565dd082
-
SHA512
9839646d500be1522ea156750ea1e7b7944395c6564c69f792360fa856cd0bc66248e216ec654e7289f897ba8c7c8a5c4d0389ec74a6313735292c5cfcf1f64f
-
SSDEEP
24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7Nxq/:SCqm2Jpr0nNM7Dus7Nxm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 337298127bcff73d175a4f83fb6d105c
Files
-
337298127bcff73d175a4f83fb6d105c.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 616KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE