Behavioral task
behavioral1
Sample
202d854855fed99fc29042f53c817d2e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
202d854855fed99fc29042f53c817d2e.exe
Resource
win10v2004-20231215-en
General
-
Target
202d854855fed99fc29042f53c817d2e
-
Size
462KB
-
MD5
202d854855fed99fc29042f53c817d2e
-
SHA1
04dfbff7ec864f9701498c1fb128ab6db502040e
-
SHA256
e4b421478fe9cbf62dd4602b247a22a5da94571b27d39988eb7a81269f811a4d
-
SHA512
a487d68d9fc082d60edf6431027279a1ddbf582a1cf5cb4468a5b35a00c4ced0269167e03d344b8c7316be8f83eb60a2b7baff58b6f25f9066bcd3a902b925b1
-
SSDEEP
12288:yF0pNpZ7sC+35XyXaIlLY9E0UwBjln/hxj:npbJEJXyXVGEf2jl/Lj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 202d854855fed99fc29042f53c817d2e
Files
-
202d854855fed99fc29042f53c817d2e.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 190KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE