Behavioral task
behavioral1
Sample
108f83192a1f994fd9d4ec11bd5e6b734a02bfc8c4fed58d835cf52ddeac5d93.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
108f83192a1f994fd9d4ec11bd5e6b734a02bfc8c4fed58d835cf52ddeac5d93.exe
Resource
win10v2004-20231215-en
General
-
Target
108f83192a1f994fd9d4ec11bd5e6b734a02bfc8c4fed58d835cf52ddeac5d93
-
Size
63KB
-
MD5
58fe73af9c0ab956f156d3d75cb39ace
-
SHA1
f3b6cace9929406814b8dfc429a31c29d52e625a
-
SHA256
108f83192a1f994fd9d4ec11bd5e6b734a02bfc8c4fed58d835cf52ddeac5d93
-
SHA512
b34dd56c6e1e55e60dbdedfffc6e41c5008336754fc986082027a44b858cc60eda5bf12c62e03160cba981a060c2d413b31950e68d3433fee4b957c84ee548e4
-
SSDEEP
768:wx/OvYQpG01n9XOJGRsFSOKQZnYsqBHfbawqlI7XLALXKLCcB9nbcuyD7UCDHZop:w5iR1qSOKkqpb+I3ALX8B9nouy8O0p
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 108f83192a1f994fd9d4ec11bd5e6b734a02bfc8c4fed58d835cf52ddeac5d93
Files
-
108f83192a1f994fd9d4ec11bd5e6b734a02bfc8c4fed58d835cf52ddeac5d93.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 168KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE