Behavioral task
behavioral1
Sample
0213dd27bbc6fb443b99b04223275768.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0213dd27bbc6fb443b99b04223275768.exe
Resource
win10v2004-20231215-en
General
-
Target
0213dd27bbc6fb443b99b04223275768
-
Size
2.6MB
-
MD5
0213dd27bbc6fb443b99b04223275768
-
SHA1
c58af4c91b2332a77a2abc0f8fc2e85a088f764d
-
SHA256
7f4b21971ec8a9fbeb0777ce142a07e76e4e07bb40216bc01e0e97ec7318a153
-
SHA512
3564ebbe5a8513f916f3b1071adc8f85ec510dbb430be5305270a50d1c4bbc69bf5e8b9b5f85e33e837cdb847191595bc7e06aa6628051861bccd4b65e13ffa6
-
SSDEEP
49152:bfIUHFTIiFzAYUbBuhk+9bJOeVpUGVOtd0HZZoZi6QEntcTcay3:bD6Ah5b4Bd0HZBQb3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0213dd27bbc6fb443b99b04223275768
Files
-
0213dd27bbc6fb443b99b04223275768.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE