Behavioral task
behavioral1
Sample
205dd8248909543f28edca976e96c73e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
205dd8248909543f28edca976e96c73e.exe
Resource
win10v2004-20231215-en
General
-
Target
205dd8248909543f28edca976e96c73e
-
Size
5.1MB
-
MD5
205dd8248909543f28edca976e96c73e
-
SHA1
7e3a9051c15c077a45dc890ac7a9261b36c45db0
-
SHA256
f86b9047b6741599e19a8c16e36722bbb86b7cccb859b86cd53c387a9be8d7db
-
SHA512
8e63d04073b90d9e7b7bdfa30fdf62fb86f55d4f9c0b552a611846be67aa256458f5f47ea260f6ed4cd627f7225692d5488f2f86a4b3ac80cd3e82bd06ab8721
-
SSDEEP
49152:vjnDmRtFUV4yywdkL6/2XNqFd3z4Jo6O96ZJuay3I59Y1dkDNQaNTm4+pAB2bt7E:vGtloA6Aoz3M0AEpLAOO/VWI3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 205dd8248909543f28edca976e96c73e
Files
-
205dd8248909543f28edca976e96c73e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE