Behavioral task
behavioral1
Sample
f81a05b25a5b7a0b170ecb5ecfcd2088.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
f81a05b25a5b7a0b170ecb5ecfcd2088.exe
Resource
win10v2004-20231222-en
General
-
Target
f81a05b25a5b7a0b170ecb5ecfcd2088
-
Size
231KB
-
MD5
f81a05b25a5b7a0b170ecb5ecfcd2088
-
SHA1
3dea0cf5f976aa5322db3445989b42f97b0610e4
-
SHA256
b131a8907a24c8d06440d3908d210cea7f052f1d960969f98e7a41a7b0a211fe
-
SHA512
918ae566f8a6f9591db942249ea6d8d256dc923b04a6f18641e8c1c6c43bb0f160b23a7b7b7ad7a841aa88975ac382129014e2b7e69ff17869b2f6914776ebd4
-
SSDEEP
6144:7mBLKJY6hqI49BDoRZl8eq11KmeiAQLD7DTfnRF3JPmhezWtO40PRloS:70LKJY6hqAZl8JcQLD3TfnH3JPmhGWsd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f81a05b25a5b7a0b170ecb5ecfcd2088
Files
-
f81a05b25a5b7a0b170ecb5ecfcd2088.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 424KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 228KB - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE