Behavioral task
behavioral1
Sample
12f7f19895abe39c91c8773807670ed0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
12f7f19895abe39c91c8773807670ed0.exe
Resource
win10v2004-20231215-en
General
-
Target
12f7f19895abe39c91c8773807670ed0
-
Size
266KB
-
MD5
12f7f19895abe39c91c8773807670ed0
-
SHA1
0bfbfd8ea6633a8652509af3a95587ac7c334486
-
SHA256
2aa3422e42c7846d3fc4ab70515ad33904ef0dbe26be1d4d4bbb2a11edae7c77
-
SHA512
ecbb2d9f85f9b00df290578807e84dbc8a761a7318b030d99b766c2979c3ca0487d878f50fc76e0484322e4ad341ec8b165f6e57353e1b21d0d3f81f9c62fcfc
-
SSDEEP
6144:XJrBWsncBYIhHm1if499HjbyeYtbaeVTmkCIEKQQ:Xn3gvQT3Dby5YQTmkCIJZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 12f7f19895abe39c91c8773807670ed0
Files
-
12f7f19895abe39c91c8773807670ed0.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE