Behavioral task
behavioral1
Sample
0191f4c2cd8048f414856e27ff43d113.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0191f4c2cd8048f414856e27ff43d113.exe
Resource
win10v2004-20231215-en
General
-
Target
0191f4c2cd8048f414856e27ff43d113
-
Size
2.7MB
-
MD5
0191f4c2cd8048f414856e27ff43d113
-
SHA1
6a4f9a7942d6325b128903a2df7ee46935176c79
-
SHA256
c83434b4c168e4a81bf5c2b5d7f29413101dfe5b5423fa1d0336efc412ced9fc
-
SHA512
2145b787836c5d6de67d435f2e2c8bd48a59c5d52c30bc0f26327578e0ae6f2df6c2bfeaca7ef43f4cdb3c737a092b2849bfdf423a50dd5b979fcab36dcba98c
-
SSDEEP
49152:BUF9kiCWy1G7aizTuqmoFmOzyWsUD0adtL4eaYNBuRfNP:4JCYPWuxyHUDLaKOfB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0191f4c2cd8048f414856e27ff43d113
Files
-
0191f4c2cd8048f414856e27ff43d113.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE