Behavioral task
behavioral1
Sample
12a149aeb434ecb517cb98a439a0ed1b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
12a149aeb434ecb517cb98a439a0ed1b.exe
Resource
win10v2004-20231215-en
General
-
Target
12a149aeb434ecb517cb98a439a0ed1b
-
Size
93KB
-
MD5
12a149aeb434ecb517cb98a439a0ed1b
-
SHA1
e4df78e9fea1a2d1569690763afabd71ba321823
-
SHA256
337e559426abcf2f7c037a60320150bc5f9645c7c8317aa958937448506ce8c4
-
SHA512
804cb7450b13151efc4fc05d901facab9d2781e66fd3ee4c0913956dc65f651274e105cddc7e2e167f937675a3cd9ab69fca41457035ad9f767e7e6e80835235
-
SSDEEP
1536:SKcR4mjD9r823F4t35ZUZd6ODtS9i95oud+/xQBBjcb+IKUdJESocojogOE7nh:SKcWmjRrz3u35mz6OxS9sGuZBAQ22SoX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 12a149aeb434ecb517cb98a439a0ed1b
Files
-
12a149aeb434ecb517cb98a439a0ed1b.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE