Behavioral task
behavioral1
Sample
100b8981504b434a9b82df828baf9514.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
100b8981504b434a9b82df828baf9514.exe
Resource
win10v2004-20231215-en
General
-
Target
100b8981504b434a9b82df828baf9514
-
Size
2.6MB
-
MD5
100b8981504b434a9b82df828baf9514
-
SHA1
4d6de892f80d6d50e955e3aa18df8e64955952c5
-
SHA256
2d4dee817ece428c44b02f61358ecfd1e236ed6a4bf0758b8e11524756cec708
-
SHA512
e5d83dbc90c54694cb77cd99ae11d8a18b623b1aa2dfe7ea3c0da8d458e61d2f8541bcee6def973fd8f8a4925f4b5a165713b47e00c2203f38bb95bae58e2f3c
-
SSDEEP
49152:rNWQ0wZbOChXLh+i8PMsGyT7LQCqd5maDZGay3:ZJ0wZSCVFyXY5ma83
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 100b8981504b434a9b82df828baf9514
Files
-
100b8981504b434a9b82df828baf9514.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE