Behavioral task
behavioral1
Sample
615972183b0c04f65267cd8608a2d409.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
615972183b0c04f65267cd8608a2d409.exe
Resource
win10v2004-20231222-en
General
-
Target
615972183b0c04f65267cd8608a2d409
-
Size
7KB
-
MD5
615972183b0c04f65267cd8608a2d409
-
SHA1
294036ab4e9077f92fa31d00459cd6a883fdd325
-
SHA256
e11a1535a24ebedd4d3892105b563ae1017bf46a525edfcad491f6ad0bb5049c
-
SHA512
dc06c53839f1b3914e8908fa2aba492be93f48ec536b61ca2dff71ef5487e132430bbcdf0bca0e38060e447600eab4c0cb928f7d18a415d631a98019ecff23c4
-
SSDEEP
192:+KRpE5GYfBwR2o4kpZxIP1u6r1Lrxb1GlLcK:+WpHQ4TxcE6r1LrGLcK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 615972183b0c04f65267cd8608a2d409
Files
-
615972183b0c04f65267cd8608a2d409.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE