Behavioral task
behavioral1
Sample
13caf08dcf80260d491fd19f0220929c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
13caf08dcf80260d491fd19f0220929c.exe
Resource
win10v2004-20231215-en
General
-
Target
13caf08dcf80260d491fd19f0220929c
-
Size
912KB
-
MD5
13caf08dcf80260d491fd19f0220929c
-
SHA1
55821afdf9e7af39ba391211ed430e8f28ac8417
-
SHA256
8533eeb5b97d90f5753915c0436c2f66ef3b2508ce369901b752f2b37274eec8
-
SHA512
75151eecd4d7f6de30d5b1e1da94777b5e7d7d9edeb9018adc4683343c351e7e5a76bd032943c62c1234dc372eed26b672925b2a70646d095de90c4936565f50
-
SSDEEP
24576:TGr2j1qiQC1LPKgRIS6/B/Ie7bH8EOXDwtegXz:TGrinjRRG/B/DbH/kUtegj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 13caf08dcf80260d491fd19f0220929c
Files
-
13caf08dcf80260d491fd19f0220929c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 448KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 907KB - Virtual size: 908KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE