Behavioral task
behavioral1
Sample
fa32389ea514fc24f4e168e0897fc687.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
fa32389ea514fc24f4e168e0897fc687.exe
Resource
win10v2004-20231222-en
General
-
Target
fa32389ea514fc24f4e168e0897fc687
-
Size
1.3MB
-
MD5
fa32389ea514fc24f4e168e0897fc687
-
SHA1
2aa301851802b31a2b7c53d1e8ed46464ee9986d
-
SHA256
ff7d61a3cc2956e4c127411b9a4fee21ef88aa6a402d28ea6c14e6b37c549f70
-
SHA512
2edeb7a67f74aa0f3659c1d40308078416e2da230189594633989c6494daa8513920ac52cb6df36d196d31b2f4a62657a1620d3342e8731d925ad8e4ad152482
-
SSDEEP
24576:CyvJq0iApr9r5D6IWNy+rqKrTRdm88H97kT9KK3lX8rRNWc:3BFpnWNy+rHrXm8w7E9f3lX0Hp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa32389ea514fc24f4e168e0897fc687
Files
-
fa32389ea514fc24f4e168e0897fc687.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE