Behavioral task
behavioral1
Sample
038a6e958bbc8373b6dea3bd0ce10c8f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
038a6e958bbc8373b6dea3bd0ce10c8f.exe
Resource
win10v2004-20231215-en
General
-
Target
038a6e958bbc8373b6dea3bd0ce10c8f
-
Size
5.1MB
-
MD5
038a6e958bbc8373b6dea3bd0ce10c8f
-
SHA1
ee4e131dc2a2eb3258db865d1ad939efaaf2a073
-
SHA256
fd6799277c4585e1970f75914ec302fa415c1189008343d0afa4f12e3373c304
-
SHA512
3c72f47db452f88701e5e021db9fe8d804c5fe5a937c7792e9e6c7c73fc6662613b488a44c5ed8fd5427c2878d59ed8184663319fae210ec1020b3a81e1b44f6
-
SSDEEP
49152:OzjP6NqpplP43Eh0FWhu7tykITpcA+bay3v3KTIavpsy5MMh8nFbu5ilwoUlGGrr:IAMYq0l7tL3v3KRR61xwBc+3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 038a6e958bbc8373b6dea3bd0ce10c8f
Files
-
038a6e958bbc8373b6dea3bd0ce10c8f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE