Behavioral task
behavioral1
Sample
532cea306bb9731c29f3de7b8e0914ac.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
532cea306bb9731c29f3de7b8e0914ac.exe
Resource
win10v2004-20231215-en
General
-
Target
532cea306bb9731c29f3de7b8e0914ac
-
Size
1KB
-
MD5
532cea306bb9731c29f3de7b8e0914ac
-
SHA1
b79cb0b9ad6effbf52fa357d2f60685df6de140e
-
SHA256
48d80c494f7ace8f68fb2062d220e906ee71e726dcb2a222d259c88b9ba525eb
-
SHA512
a5e4bdc3eac80d33215ed02260423b07f377afae15e1e72b16a7a7500ca7b6771d71efc15c93c5c6b6cab9d400d5a3ee8e0613cca72c1a92d62d8bef77fbeb93
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 532cea306bb9731c29f3de7b8e0914ac
Files
-
532cea306bb9731c29f3de7b8e0914ac.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 753KB - Virtual size: 756KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE