Behavioral task
behavioral1
Sample
12a791ffcb9625a7c658d3a5f7e05be8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
12a791ffcb9625a7c658d3a5f7e05be8.exe
Resource
win10v2004-20231215-en
General
-
Target
12a791ffcb9625a7c658d3a5f7e05be8
-
Size
239KB
-
MD5
12a791ffcb9625a7c658d3a5f7e05be8
-
SHA1
11c1b62f57e22ddf309944a1bf0b260f45e31410
-
SHA256
e8949fe756a4b3c305daaabb4a4dd489e2430d2dff874a4df6fcfd6c1a3665f9
-
SHA512
38e432638c50bf54fe6c5afcdfc93e16c1c15e1bdb28b0d62748adfacd18eca2e74773aaf3fc51a5f8bcb35307a2e10f0ce37777936d0897da7eebdb2b45b109
-
SSDEEP
6144:u4M7TQa0wq4B2Il5ccfQzlR0iI6Y1LKpXyH4bqE:u4M70a0KrMW6UKXLbq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 12a791ffcb9625a7c658d3a5f7e05be8
Files
-
12a791ffcb9625a7c658d3a5f7e05be8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 228KB - Virtual size: 228KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE