Behavioral task
behavioral1
Sample
124f4b43abb77b1e8411ff1a81f1f2a5.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
124f4b43abb77b1e8411ff1a81f1f2a5.exe
Resource
win10v2004-20231215-en
General
-
Target
124f4b43abb77b1e8411ff1a81f1f2a5
-
Size
784KB
-
MD5
124f4b43abb77b1e8411ff1a81f1f2a5
-
SHA1
82a55fa03dcf4db46efcc64a4e99502f63b81284
-
SHA256
d894d83a0e9fcf1e21ad2eea3588a02d80927fb0a6ef4f7f8561208ea57d24b0
-
SHA512
6dff1ce312d498fe32df3595b0cebb64b778d0c4d744d66193e6bfe0348ee85446a31a0628a41d3d5956e8de1c8783b4aaa8a6cd6da5310802457f23f2f109fb
-
SSDEEP
12288:CRREvm6x4473V9mU3YFnkSbnfv5VQ3xs0POoAcCqR6HQTnfVtyNKusaMdM7Fa:CnEvmSjmUSkIfvfIdPOoAcC3HQT3yh7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 124f4b43abb77b1e8411ff1a81f1f2a5
Files
-
124f4b43abb77b1e8411ff1a81f1f2a5.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE