Behavioral task
behavioral1
Sample
12dc371966cbc6719c8e9acdf56b61ec.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
12dc371966cbc6719c8e9acdf56b61ec.exe
Resource
win10v2004-20231215-en
General
-
Target
12dc371966cbc6719c8e9acdf56b61ec
-
Size
784KB
-
MD5
12dc371966cbc6719c8e9acdf56b61ec
-
SHA1
d0a16b999ab5ddadbb45b817df14190c3ea44a29
-
SHA256
b38d3bf7aec5a502e16f95c42267504fe7968cb3d789ae92e7de9ce665aa9eeb
-
SHA512
f50717a27e13c6e48dd0a82e867b53c548a15b99e44d091a55214a66d2d507bfc87fdee7059c321f5791419641c95144ca67cf6c007b1ea0f0645ef850532785
-
SSDEEP
24576:/LnNC6bCegIBmVnqHSw4xI7+P7tWYlHDFEl+Fb:T0/egIIO4K+P7thlSlK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 12dc371966cbc6719c8e9acdf56b61ec
Files
-
12dc371966cbc6719c8e9acdf56b61ec.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE