Behavioral task
behavioral1
Sample
f63211a4e2bef2f43d2f3cd05ed800a7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
f63211a4e2bef2f43d2f3cd05ed800a7.exe
Resource
win10v2004-20231215-en
General
-
Target
f63211a4e2bef2f43d2f3cd05ed800a7
-
Size
5KB
-
MD5
f63211a4e2bef2f43d2f3cd05ed800a7
-
SHA1
894f4558a3de60d8e3c05cdfed2bba83e6d471c6
-
SHA256
e3bc19221a44f19e03f9e547e3b1bdc3d2ff3f878dfbb8af69859f1cab3108d5
-
SHA512
5b86d63054f0bd15c1e481088e42fe7d7ae7fc4d9b5b9b0856d74a4aea32a6099a928d9d858e0a5d9d3675fe3d7518ade199a9dde047b1d6bb2492cb5429b646
-
SSDEEP
96:86zsSr28x4LXo/RCpL+/feZRK0OCf0bQCGNrgI7nP5BRFCuAM46op6JVa:3sKP4LXMEpaeZg00cyshxCi46G6J8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f63211a4e2bef2f43d2f3cd05ed800a7
Files
-
f63211a4e2bef2f43d2f3cd05ed800a7.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE