Behavioral task
behavioral1
Sample
12328b535d61683387018d2bea28f9dc.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
12328b535d61683387018d2bea28f9dc.exe
Resource
win10v2004-20231215-en
General
-
Target
12328b535d61683387018d2bea28f9dc
-
Size
1.3MB
-
MD5
12328b535d61683387018d2bea28f9dc
-
SHA1
cb0028da4f0903bc35e7290a75ddaabde635aa56
-
SHA256
3d986bb38b8330f23773b0acaa96f90bfa4f6d41c08961113f821540d743b8d7
-
SHA512
316cf4c306373dd04c6bc2d1888b520e5b55dc5b61c0acfead30a213902c0387ef39c547ed9ca97a37489519bb417a051ed2198602513823b93e82074712adac
-
SSDEEP
24576:xI1e4vSpZvwKnDvFYTD4O69Ct4RisO7LVTuOBh59VC2OHuTWc:+1Fqv4KDvaUjCmPO7ZiOr59muTp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 12328b535d61683387018d2bea28f9dc
Files
-
12328b535d61683387018d2bea28f9dc.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE