Behavioral task
behavioral1
Sample
137846aa5449ce6d1df75223dc903eae.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
137846aa5449ce6d1df75223dc903eae.exe
Resource
win10v2004-20231215-en
General
-
Target
137846aa5449ce6d1df75223dc903eae
-
Size
133KB
-
MD5
137846aa5449ce6d1df75223dc903eae
-
SHA1
566238e63ae44a84761602afbba9cc9929830d06
-
SHA256
16937931a2b756650b5ce576151f7792e3097c053ceae362c89586817b4cbd46
-
SHA512
e44fb3ace759fc97564e0b864bc3c359faf92bdea7ee2d10bfa1e8acc8adaf84e78ffeceeb807515cd513baf604bbe1de2cc0d4924b4374ee71c011c7de4d2e2
-
SSDEEP
3072:jlk8kppB0DsAcoLHtV1lQA6jOAD1SlSjd61swpEO8dVehwRRw8Z/iDO8ZQ:jlk8knBKDLHP1yulSGsgn+Ihp8FiDXQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 137846aa5449ce6d1df75223dc903eae
Files
-
137846aa5449ce6d1df75223dc903eae.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE