Behavioral task
behavioral1
Sample
72caf2215433a8cef9ef7faa110a5692.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
72caf2215433a8cef9ef7faa110a5692.exe
Resource
win10v2004-20231215-en
General
-
Target
72caf2215433a8cef9ef7faa110a5692
-
Size
47KB
-
MD5
72caf2215433a8cef9ef7faa110a5692
-
SHA1
89ba618dd1184b629dbf0badf07c4a7a108c12ff
-
SHA256
73e3d46bb9a84299f313222eb87a57e08b1bc09a52bf6dc2e2e8c9bc6bd1f37f
-
SHA512
b78e97cc70b9eeed8ff69caf8e86ab29e34a9b669cd13479c69af222a2cdd5780f2821ff24e0d595b09ea975e3a00dc2c076dd5bc277f40175129b5bdea3b9b2
-
SSDEEP
768:+PGkubX2mSp3rkQrrrrrrrZMCAWI+8nCaVNV/IPT:+ObJ83trrrrrrrZvAxvbjVUT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 72caf2215433a8cef9ef7faa110a5692
Files
-
72caf2215433a8cef9ef7faa110a5692.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE