Behavioral task
behavioral1
Sample
143696e01a49d52f0bee334c9877036b.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
143696e01a49d52f0bee334c9877036b.exe
Resource
win10v2004-20231222-en
General
-
Target
143696e01a49d52f0bee334c9877036b
-
Size
1.3MB
-
MD5
143696e01a49d52f0bee334c9877036b
-
SHA1
3abd2b6ed28890cf5bd30fb0b9b35c033c8371d1
-
SHA256
56942bdfd4681584e17f2441ad21e412571363153360fcb792f33041edd3582f
-
SHA512
24714005921897162a9de39a0b85c11fa91be2d4ceedf106984d6f16a4146bf6b1dde1c453378263ecd3619c9975bedbfd61a62d82a3dbd7271989aabd30ee10
-
SSDEEP
24576:EBc0DkKwMJQ/ZlVyDuCk39VKJfSkbBoRZo2p6kIReuWkVl9w7JmU9/9Us:EBc0dQ/h/39aWfYkIE3R9j
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 143696e01a49d52f0bee334c9877036b
Files
-
143696e01a49d52f0bee334c9877036b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 141KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE