Behavioral task
behavioral1
Sample
141333c2553ce7212872935413648949.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
141333c2553ce7212872935413648949.exe
Resource
win10v2004-20231215-en
General
-
Target
141333c2553ce7212872935413648949
-
Size
3.9MB
-
MD5
141333c2553ce7212872935413648949
-
SHA1
4911a80931d295901b1507769bcbbcda3094b5c7
-
SHA256
9ef31ba95727069d750612e2807e0bf74850edc4979ac67b1a30f00bb57b1649
-
SHA512
3bef637646b694256796ab2862847b592dd12c9db05708667b3ad20006a756ba8fdcdf5c7e9dd93e9407c965da3abb1424898c3a2a0e875966afb47e6e5b1d95
-
SSDEEP
98304:extdxsbYnD2i7D3xkOxYwpKaUroj0m/iD2i7D3xkOxYwpKQO9fMua8tWD2i7D3xF:edxsOh7FkNqKTy/ih7FkNqKQaaJh7FkC
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 141333c2553ce7212872935413648949
Files
-
141333c2553ce7212872935413648949.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE