Behavioral task
behavioral1
Sample
fed0f57763de49464188bc0f846098d2.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
fed0f57763de49464188bc0f846098d2.exe
Resource
win10v2004-20231215-en
General
-
Target
fed0f57763de49464188bc0f846098d2
-
Size
156KB
-
MD5
fed0f57763de49464188bc0f846098d2
-
SHA1
4027939c1c71efb67a9465956e3d3e95d4c51cf8
-
SHA256
e10cd5fee3dcf9373801a2d67207bcdb3a2fed09521553f5b883c39031cbd3a0
-
SHA512
2a3aca5eaece1281f08c4775cd653861cbe9d8f5f2cda90d6d59972229909dbdb97bab4b5b30038d7718cf137972cc7d91489383d37eb3b884f290623b56a957
-
SSDEEP
3072:8RJ0ABMg8OARb4H3V7PIdBgxLzdZ8qp2ppj3Tp3+QkcioxcOXIj6mhA6biOxUD:8f04gOobG3VjIdBW9ZYzl+QkjoCOYjli
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fed0f57763de49464188bc0f846098d2
Files
-
fed0f57763de49464188bc0f846098d2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 376KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 230KB - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE