Behavioral task
behavioral1
Sample
108805dd9fd5cd70ef9d8c8f074a5729.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
108805dd9fd5cd70ef9d8c8f074a5729.exe
Resource
win10v2004-20231215-en
General
-
Target
108805dd9fd5cd70ef9d8c8f074a5729
-
Size
3.0MB
-
MD5
108805dd9fd5cd70ef9d8c8f074a5729
-
SHA1
9584f9bf0552ffe4e65e7d3dab9539f5239cfd41
-
SHA256
38f314d3d9ef6e8569b7d564041d48185e2430724731e250d5882f584146e7ce
-
SHA512
093c63aafeedfe3ce4bbc73f5fd40e7a067788d9b228d7edb27fed6746a8293e9c601c0b4755df6600e44be724b4d6a3f72b67c25d49a5d4943dadfa8aa30286
-
SSDEEP
49152:p8zCMDSgbtHIDqTiseTDwDTnhKt8TNAnNnfrQwM4Kz1HiLYaBNtUW5oTyv:K2MDSstHIWWToK6ANzQwM5gYMg
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 108805dd9fd5cd70ef9d8c8f074a5729
Files
-
108805dd9fd5cd70ef9d8c8f074a5729.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 5.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 170KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE