Behavioral task
behavioral1
Sample
394ca599fba12d8bdb7e2fd056a7f776.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
394ca599fba12d8bdb7e2fd056a7f776.exe
Resource
win10v2004-20231215-en
General
-
Target
394ca599fba12d8bdb7e2fd056a7f776
-
Size
33KB
-
MD5
394ca599fba12d8bdb7e2fd056a7f776
-
SHA1
f6032a30d71b193da96eca17a965ba9c339f78df
-
SHA256
62a0c0587d46c08947c8c85c534a27f601c5605cc8eed6510b39572f18371a3f
-
SHA512
653d151a0dea519a63d16c0f60c7feca144a1cd22a041b82290f13c23b83a6311591d8b7950c504cea1c99313da3b673b7c540f95f251557c4ac6eb465610273
-
SSDEEP
768:kOcZDd25saggwXkl7SWHcCeHdcqESCcQcZt7pPqkp:hV5WgwXkl7SWuHucQ4nZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 394ca599fba12d8bdb7e2fd056a7f776
Files
-
394ca599fba12d8bdb7e2fd056a7f776.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 175KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE