Behavioral task
behavioral1
Sample
02e697621eb7ce988655ef4727b639fc.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
02e697621eb7ce988655ef4727b639fc.exe
Resource
win10v2004-20231215-en
General
-
Target
02e697621eb7ce988655ef4727b639fc
-
Size
2.0MB
-
MD5
02e697621eb7ce988655ef4727b639fc
-
SHA1
b345cddcf878f11b6639a62c4ce3112258bff9f1
-
SHA256
df690a85f4887c567810bbab87cfdbb3a7e9e2f82c8b1cae53a77f27e77059e1
-
SHA512
73ddea1176213768c481eac0bcdb990b8d5b7d0c029d006b5fb875c6c829cbaf8f04cec7fb8282d5ffc8337c75807bff772f1b67a71db65237e30d1142c8469b
-
SSDEEP
49152:4dIb17yL0PGsvxSM0Mz8TT9nVD7VENy1CXXWZxhLA4FvxSM0Mz8TT9nVD:tb17yLaG2SM0y+T9nVtF1CXXWZxhLHXK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02e697621eb7ce988655ef4727b639fc
Files
-
02e697621eb7ce988655ef4727b639fc.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE