Behavioral task
behavioral1
Sample
12732fe641f82535ec1af459fc3e12c2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
12732fe641f82535ec1af459fc3e12c2.exe
Resource
win10v2004-20231222-en
General
-
Target
12732fe641f82535ec1af459fc3e12c2
-
Size
31KB
-
MD5
12732fe641f82535ec1af459fc3e12c2
-
SHA1
07395cb67b364137b97bd6b04f19fce1bd4b31fe
-
SHA256
e1c2490243286e9a3c6b7a2ae4cc5ae7e11c956f342bb1e5d885879a2762f440
-
SHA512
456650118feb4522b5cbc698200a2a49d78d677852691315c8f760d479029090cc2ce06c86bc50218e2df64e9d4ce61b7b1044360f332ef31edaed0b28fa0ee7
-
SSDEEP
768:lGcAPQIpz0Mb18Kdt14yvLhl1FnbcuyD7UxarLCBH3O:p3TMb1FpPtrFnouy8crYH3O
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 12732fe641f82535ec1af459fc3e12c2
Files
-
12732fe641f82535ec1af459fc3e12c2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE