Behavioral task
behavioral1
Sample
139755c8142d11392ed25db3f5548ecc.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
139755c8142d11392ed25db3f5548ecc.exe
Resource
win10v2004-20231215-en
General
-
Target
139755c8142d11392ed25db3f5548ecc
-
Size
126KB
-
MD5
139755c8142d11392ed25db3f5548ecc
-
SHA1
dc3cdc94e5c184fb87d01c086d5ff106b2e5b808
-
SHA256
0ac02b99ee0aa7609177742bec8d174f621961d5477f4f9649b314d2e2a92766
-
SHA512
04a0769daee164b5b8f2924b867aa02c91a0ce156a744fb08012073d7085c50f62925df9fdadd4c6347480d8b4bc5538081ba6b3d1d0c9a51e545b392e15ba82
-
SSDEEP
3072:SKcWmjRrz3ZKcWmjRrz3T1uyxYojAyfejpHX758sO:hGyGZxxLLfejRX9zO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 139755c8142d11392ed25db3f5548ecc
Files
-
139755c8142d11392ed25db3f5548ecc.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE