Behavioral task
behavioral1
Sample
04befe0c2f5109eb1ba81a89ec361402.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
04befe0c2f5109eb1ba81a89ec361402.exe
Resource
win10v2004-20231215-en
General
-
Target
04befe0c2f5109eb1ba81a89ec361402
-
Size
414KB
-
MD5
04befe0c2f5109eb1ba81a89ec361402
-
SHA1
967549e6769143fee44304e583350b2a3fb25119
-
SHA256
fdaf37bbe94e33d9e1ca830362334c43eedb751ffb0a8bdcea7ca6a48c69bbd3
-
SHA512
319f221e12c123970f104850158e4fdebd0c95bb88aa06951f0cda78994a1dca7da0f15e66b0694e12e40092a41e650f64f34b6efb986e45fc9b8e00bebbf515
-
SSDEEP
6144:nTj8GmPuYn5hq61hpTde3lXwO5Z2bpE7omjcDNHzSWU08+Eu0qIp:Tj8GmWY5ht1nT0P5Z2beydW88+Eu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04befe0c2f5109eb1ba81a89ec361402
Files
-
04befe0c2f5109eb1ba81a89ec361402.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 992KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 401KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE