Behavioral task
behavioral1
Sample
02694e15e04890445430bc1647f0e1f3.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
02694e15e04890445430bc1647f0e1f3.exe
Resource
win10v2004-20231215-en
General
-
Target
02694e15e04890445430bc1647f0e1f3
-
Size
11.7MB
-
MD5
02694e15e04890445430bc1647f0e1f3
-
SHA1
998ea6f28ffd39c1b2b2cba346746be7c7a1a12e
-
SHA256
d54a7650f83b4eed710c994dc0678a6d4adc47dda5a5856de0f0be53a65970b8
-
SHA512
b3962c0c565ceba61e6ad79d2d1b54a875c0e6c47e2bb1ac71b7c8c0c345b3d5b1de0939f96b9833711a4edd6e4bd09f7c6ff3a9243569af59e4af398070341f
-
SSDEEP
196608:PZIMgl/iBiPy9Cuy5qgl/iBiP455Ggl/iBiPy9Cuy5qgl/iBiP:PZIM2il9Cu92iZ82il9Cu92i
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02694e15e04890445430bc1647f0e1f3
Files
-
02694e15e04890445430bc1647f0e1f3.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE