Behavioral task
behavioral1
Sample
03e979b9f2e6ff8dedb54465502314cd.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
03e979b9f2e6ff8dedb54465502314cd.exe
Resource
win10v2004-20231215-en
General
-
Target
03e979b9f2e6ff8dedb54465502314cd
-
Size
260KB
-
MD5
03e979b9f2e6ff8dedb54465502314cd
-
SHA1
4069c18338b915045df27251fca69e4ba0ce1af5
-
SHA256
71cef1d109dd92dd1061bf5b003db2c2fd3c61e5c83bd480626f12e96d58824a
-
SHA512
162304d9e23333d3c203ae6ea681962c1f80a3ff5a69f14f7877dbe0228fc3554c59b49f1c81519f09db1dcdd7739228dd79e14d49a2d0e96bd1b9f25ce1e77e
-
SSDEEP
3072:+dqiuw2ZlDbZI+NjBZdZt3VJU4pRHGGFdWO0l:+rCBjBZdZZ1p9rEl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03e979b9f2e6ff8dedb54465502314cd
Files
-
03e979b9f2e6ff8dedb54465502314cd.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.SUPX1 Size: 76KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE