Behavioral task
behavioral1
Sample
faf55105a518e0a86d58ef32aa3c9e7b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
faf55105a518e0a86d58ef32aa3c9e7b.exe
Resource
win10v2004-20231222-en
General
-
Target
faf55105a518e0a86d58ef32aa3c9e7b
-
Size
6KB
-
MD5
faf55105a518e0a86d58ef32aa3c9e7b
-
SHA1
d4d36fc5779703d4f522a6dac830828b89b39153
-
SHA256
ddd053db67c0d763029ce860a47603b890fa9d57ae70cf1c6d4697edbea89dd5
-
SHA512
0b525b7d493dcb5f385e19d1964cb3f6c937888ce5c496f8a30467d81a7ca5a2f2085865a2f128bb6e94c301afea87eeea7575f38735f239706875370101b862
-
SSDEEP
96:PLpNKtcwMDsbMuLwqChH+nr225ItXFC7N5A5jjAIsNQ+uu4meeHRwGmHqKT7cbnU:DOSp7sChepoC7A5jjMGu4qwnq2cbU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource faf55105a518e0a86d58ef32aa3c9e7b
Files
-
faf55105a518e0a86d58ef32aa3c9e7b.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE