Behavioral task
behavioral1
Sample
122f342aa15adaa5cee6baf8d0d76fcd.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
122f342aa15adaa5cee6baf8d0d76fcd.exe
Resource
win10v2004-20231215-en
General
-
Target
122f342aa15adaa5cee6baf8d0d76fcd
-
Size
298KB
-
MD5
122f342aa15adaa5cee6baf8d0d76fcd
-
SHA1
362d0f51670e72e54a5083680ec6a636decba252
-
SHA256
ca3000e6b74acf6659de51e4a7d1a8fd65f4792208b8d3abf414a4c3699e1327
-
SHA512
8a5667e469a26c125adda164e53f67553a54c5c97a9e23b4fb33745289d974c05a1f95dfc50e7ef54e7b28f04bb425bf97bd91bf195b21a2e19bd2165730b730
-
SSDEEP
6144:sZl2PGHgMK1VVL3mnc57pw+3JmCLopPMKEsVx:smPHMKvVL32s6rCcz
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 122f342aa15adaa5cee6baf8d0d76fcd
Files
-
122f342aa15adaa5cee6baf8d0d76fcd.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 51KB - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE