Behavioral task
behavioral1
Sample
04c89b345e3b8d58c09e23b7918a72a9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
04c89b345e3b8d58c09e23b7918a72a9.exe
Resource
win10v2004-20231222-en
General
-
Target
04c89b345e3b8d58c09e23b7918a72a9
-
Size
6.0MB
-
MD5
04c89b345e3b8d58c09e23b7918a72a9
-
SHA1
c954042590c2c376df6b6495a0e0e2bbde6c5fdf
-
SHA256
34376d8fd8d2171ef6972293a65280dcb98b6574c24e297d27eb9819373b9a36
-
SHA512
c27995f2eb702a0237e23ce8800e871bf03bd504e9d744eec5fd55196f1f58ff651a573fef48c8303910d06b82bbf6d9b713b0729ac93662d7819f8652113544
-
SSDEEP
98304:hWUpCcakl1rCZ+6GfUstcakkxHlY9FU5/7cakl1rCZ+6GfUstcakLcpbSXcakl1V:k5dIrC06Wdd3zJ5/7dIrC06WddmvXdIV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04c89b345e3b8d58c09e23b7918a72a9
Files
-
04c89b345e3b8d58c09e23b7918a72a9.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE