Behavioral task
behavioral1
Sample
522e0a3b708ca194349aaf287fcb1176.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
522e0a3b708ca194349aaf287fcb1176.exe
Resource
win10v2004-20231215-en
General
-
Target
522e0a3b708ca194349aaf287fcb1176
-
Size
33KB
-
MD5
522e0a3b708ca194349aaf287fcb1176
-
SHA1
6ea6c7be22c3da858d7e2f1e0c1c4d7d19da3ac3
-
SHA256
2c87fb27b8a8906d4f7327f9afd4933867b56ea5ea0e4922786bfdfab7560d0f
-
SHA512
3cc569e723dcd095726b1e452ba9afc0a722c25f5a76c882b70e0730a7d271aed9a2991eedf040a9605a56af4a078a2dba4739ef050d984ba10a8bed0908c22b
-
SSDEEP
384:1LRU+Qeycotwv3XmP0FmSheEHlwOSk4G6jJZqHL7/vMJB:I+Qe+mvs0FmSMulwOh4G+KfML
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 522e0a3b708ca194349aaf287fcb1176
Files
-
522e0a3b708ca194349aaf287fcb1176.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE