Behavioral task
behavioral1
Sample
372c4b88c4b22a9bc37658fdd4366f5d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
372c4b88c4b22a9bc37658fdd4366f5d.exe
Resource
win10v2004-20231215-en
General
-
Target
372c4b88c4b22a9bc37658fdd4366f5d
-
Size
11.6MB
-
MD5
372c4b88c4b22a9bc37658fdd4366f5d
-
SHA1
d5a331acc33f1525ffc4831c93389e7314e6e531
-
SHA256
6f2d50ff090d2f5fea2bea312e4cd819d779a8b2409403af9de8f44d8c17c88b
-
SHA512
a99665dc6e1a0627c8db6dc1f62b57d65b8bc3198e9baa78ed28c5c55aa8914ae0704f99b714954e15bd0dada212adbb01891d6dacfd875c728292aee94c00ab
-
SSDEEP
196608:kzHk3xa+SbFWS3gqImjK0moIkGp19Nna4DgN9A3Tbm1wFKP5FpiHd/Io1Ap5c:kzHkBa+SymjK0IkGtbIwc5Li9IWAPc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 372c4b88c4b22a9bc37658fdd4366f5d
Files
-
372c4b88c4b22a9bc37658fdd4366f5d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 3.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 17.9MB - Virtual size: 17.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE