Behavioral task
behavioral1
Sample
03882f401d15f2fc7e1c4146b930147a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
03882f401d15f2fc7e1c4146b930147a.exe
Resource
win10v2004-20231215-en
General
-
Target
03882f401d15f2fc7e1c4146b930147a
-
Size
303KB
-
MD5
03882f401d15f2fc7e1c4146b930147a
-
SHA1
5a110c51fb620559a525d649f250191cbff818fb
-
SHA256
b82387bf710a98efaefbd3974118e2aa34a7fa0dee9716fdcc2d5a2e1f4ebc1f
-
SHA512
d4b00e5c7460ca454aa7458ffae12650b82fc0b1892aa80d79e3ae4cf1527aaef87f5dea6735b5227256ddf4c6913925d5b253003498624ace87baae46018388
-
SSDEEP
6144:AZvMGdMb7aEkLWvMBRTu8UjJc7V38s6u420K690rxYE:AdMPb7SL4MnVH7+uW96
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03882f401d15f2fc7e1c4146b930147a
Files
-
03882f401d15f2fc7e1c4146b930147a.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE