Behavioral task
behavioral1
Sample
2091fe32b34079ea177009cb12860a11.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2091fe32b34079ea177009cb12860a11.exe
Resource
win10v2004-20231215-en
General
-
Target
2091fe32b34079ea177009cb12860a11
-
Size
1.3MB
-
MD5
2091fe32b34079ea177009cb12860a11
-
SHA1
897820ab4528f4a7ec84f85e3f037992793bd638
-
SHA256
905bb5ad53f176f6cf47de6330284d014b367bd1057544ce3af9d328b615a953
-
SHA512
bb99b694ffd993537c26b2d2a87e597039ef35ca6e5d65efba8ee2b5cede62e2b22c7b6e9f05c33d372a49868e2f7d7dfe46078572fb4e59c04b6ac6d46a9612
-
SSDEEP
24576:jf2UMpxiyoX8af/Vc5klzKxgg5C6tyNEkCsMQeDr3oKyRvG:PMTWtW5lq4C61kgX4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2091fe32b34079ea177009cb12860a11
Files
-
2091fe32b34079ea177009cb12860a11.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE