Behavioral task
behavioral1
Sample
1387da84c96acc2537fd6f80bf23b903.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1387da84c96acc2537fd6f80bf23b903.exe
Resource
win10v2004-20231215-en
General
-
Target
1387da84c96acc2537fd6f80bf23b903
-
Size
20KB
-
MD5
1387da84c96acc2537fd6f80bf23b903
-
SHA1
84c049b3aa6d3cc24e6799c776d606970c457b98
-
SHA256
1d1dffe703edf7ebd62fe939fb44f0631d2a87d98224e77192445e49698e567f
-
SHA512
bded832409ae58fb597decfc7f2f9a9418f07efe1004342b441888b03aec6bf2fb00955123c9559c4945e5dd8acf9ed6a8ef780db6d7744b6849331197544815
-
SSDEEP
384:C9+950SK0Ni4f/onMBz8zw8XfIjaJL7rEXX/cPyKq9O1en+1dAJ1:KC5uOvInMl8k8PFpYQcO171mJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1387da84c96acc2537fd6f80bf23b903
Files
-
1387da84c96acc2537fd6f80bf23b903.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE