Behavioral task
behavioral1
Sample
1223e8e8e272122e2b1cd9d2aaf752b6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1223e8e8e272122e2b1cd9d2aaf752b6.exe
Resource
win10v2004-20231215-en
General
-
Target
1223e8e8e272122e2b1cd9d2aaf752b6
-
Size
133KB
-
MD5
1223e8e8e272122e2b1cd9d2aaf752b6
-
SHA1
97a5d8f6408a38b1e1c37d8ba769b4f29696e1b6
-
SHA256
9ea027dd0df72a1ace02d3e30c64dc9b37e71002ef9e34c33c5cfd8ca58e4b1a
-
SHA512
51f2247aacd016ad3628cc814aaa3dfd73652d9ef61054290b4e7495b4fc52d788b1dd240147f216ce1f3058d2f3f1aa908263ab3c81f11045ee3d94b1f2a4ec
-
SSDEEP
3072:dN0+kPkZM1AFFVLdG4Vs5NSwsca5pRRZuHurmXchpWnPydMUE0Q:d1fZUeFpRO49i/yd9E0Q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1223e8e8e272122e2b1cd9d2aaf752b6
Files
-
1223e8e8e272122e2b1cd9d2aaf752b6.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE