Behavioral task
behavioral1
Sample
10fa1f2f99a968ef681e2c0c5b42e02a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
10fa1f2f99a968ef681e2c0c5b42e02a.exe
Resource
win10v2004-20231215-en
General
-
Target
10fa1f2f99a968ef681e2c0c5b42e02a
-
Size
200KB
-
MD5
10fa1f2f99a968ef681e2c0c5b42e02a
-
SHA1
c3afe5b4bf177067bd3332bfc1193ab3aa878396
-
SHA256
3df3bd8b9a907df22565c603aa4570e2d78e52c1f06b427f8d69edcd153711f6
-
SHA512
4552ae6a564284a65b14d8fc2eeea9a46b869a108148858514687971dd2d80df20cdd5ade38daf2729a1d7cf6d280a45409ca0b40e5c8e6aa2b6d1513fdcf238
-
SSDEEP
3072:eGYjnZJ7YtG1jxrWrI1091xUTnPQkFAf6PvQlDZ7VXNz+Uen0PkfpQEkybB2:ujn/7Yo1jx0n1a8kmKQlpNVJhybB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 10fa1f2f99a968ef681e2c0c5b42e02a
Files
-
10fa1f2f99a968ef681e2c0c5b42e02a.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 194KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE