Behavioral task
behavioral1
Sample
20ca6904921aa41557ab21935aa242d9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
20ca6904921aa41557ab21935aa242d9.exe
Resource
win10v2004-20231215-en
General
-
Target
20ca6904921aa41557ab21935aa242d9
-
Size
133KB
-
MD5
20ca6904921aa41557ab21935aa242d9
-
SHA1
4111e5fc671ba82a32ee2fe41b695722abae2759
-
SHA256
4187c12d3d5ba8106c0d82c8a5340167055ccbcc717985972e1ac2533187b609
-
SHA512
1904b5f53b1c75059d04242d947520ef35d818da23d942bdf4619cda8200460a92fd6f0e3efe1a6b31b8ca5b09a4421ef72916fedf21adfe1b5db35aa2b71576
-
SSDEEP
3072:aaDW6VOM6iWY95il42QkbKeAtBjmFUQWDcqRuVKBAs1XXm/+yYQ:hq6Vt6jY95il42RtAtRm6PFRuKBAs1Xa
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 20ca6904921aa41557ab21935aa242d9
Files
-
20ca6904921aa41557ab21935aa242d9.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE