Behavioral task
behavioral1
Sample
1201ccf55a687bbf632f9e25f26cae84.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1201ccf55a687bbf632f9e25f26cae84.exe
Resource
win10v2004-20231215-en
General
-
Target
1201ccf55a687bbf632f9e25f26cae84
-
Size
257KB
-
MD5
1201ccf55a687bbf632f9e25f26cae84
-
SHA1
1c62ee640a8398b38703e55f102cd34218401d4d
-
SHA256
dd44a13c38408f844ae62cf41a8bb99fb6f44fedeb9764d5e0a3f903dbd31a65
-
SHA512
4e95f3a08f248229ae2a554a48f008c14c60172f220a6b32604579ec41662a5866c5e5b3720190dde3fdfefedac22201fcb4fb3fd55acdaaabebcc310cb8b019
-
SSDEEP
6144:qJjs0RyTYNKaAqbMCoyfSKT8Fs5BPryBQc9ldMCTPSo/otW:qJw0RyUKju/7fSDFOryGuldMiSo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1201ccf55a687bbf632f9e25f26cae84
Files
-
1201ccf55a687bbf632f9e25f26cae84.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 420KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 250KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE