Behavioral task
behavioral1
Sample
074c33af62db779a4ef41c5387196235.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
074c33af62db779a4ef41c5387196235.exe
Resource
win10v2004-20231215-en
General
-
Target
074c33af62db779a4ef41c5387196235
-
Size
28KB
-
MD5
074c33af62db779a4ef41c5387196235
-
SHA1
dcef67fba0d19c6c14b57f91ff3979b9aec117dd
-
SHA256
e6ed1f9b1e543aa552d5016e8982aca2584cfb8c31adc0b1ae99435aaabf0533
-
SHA512
1ba4e818efe63d6514351f679e09b280025f305216869c7733da0382191933afda275fa4655086d455ac12a8c7a53e9699e36dac8ea5a525f75cae277fc24ead
-
SSDEEP
768:TciUsPITFrridwoT7wlOOlrr92ek/Ylvk3aJK:DsZ0wWYnT2eQaU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 074c33af62db779a4ef41c5387196235
Files
-
074c33af62db779a4ef41c5387196235.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 236KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 45KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 137KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE