Behavioral task
behavioral1
Sample
031078a11c8caa9db2ea54571dccba50.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
031078a11c8caa9db2ea54571dccba50.exe
Resource
win10v2004-20231222-en
General
-
Target
031078a11c8caa9db2ea54571dccba50
-
Size
87KB
-
MD5
031078a11c8caa9db2ea54571dccba50
-
SHA1
3156c5faad8d8c54547cf12700e45c6a1dbd92fe
-
SHA256
79ee1dd25310ead2cb81b390d0d87c6498121ad57754c07ef2c4b712d82ca456
-
SHA512
314729481f576d8440ad349c29639a5c4765384143167cf6d1103be729f84cf319afe3da7dc97c5ee164c024dd91e82414129a8e9aa4e06042e2b9faf32fe041
-
SSDEEP
1536:GccZ5lhNCvL/OeTbERu3jBjeSEArDzDcya14k+B2QcRKzcVvsgOjVP5eTUX9Ib:GccZ34F/ERuVySjrDUyxZcQcRKTjd5e9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 031078a11c8caa9db2ea54571dccba50
Files
-
031078a11c8caa9db2ea54571dccba50.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 188KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 81KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE