Behavioral task
behavioral1
Sample
116e6c22cd44dff4786d7d5bef9eb276.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
116e6c22cd44dff4786d7d5bef9eb276.exe
Resource
win10v2004-20231222-en
General
-
Target
116e6c22cd44dff4786d7d5bef9eb276
-
Size
133KB
-
MD5
116e6c22cd44dff4786d7d5bef9eb276
-
SHA1
45538dd213f76053894693ddcac4f032d1210bd5
-
SHA256
b24307fac07a055db2a336fb66b6573ce1d86259a772eb13a29dcfc4e2ae992b
-
SHA512
4249270ab0a8a7d8b4d603b261632a7d7e469521f04df260f184ecd4e50e0458a19e74629875ecc1c2b6586dad8fbce89e8d969c2e82527d276ee34d6d089227
-
SSDEEP
3072:6+Axqg5xG9/cljuq+c+MKCFOpe0SbwwcP4FIQ07nFDclQ:Eqg5A9/F1JkvcP4FITRDclQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 116e6c22cd44dff4786d7d5bef9eb276
Files
-
116e6c22cd44dff4786d7d5bef9eb276.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE