Behavioral task
behavioral1
Sample
155c9c506cee10904d72d3e0ae8e92d8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
155c9c506cee10904d72d3e0ae8e92d8.exe
Resource
win10v2004-20231215-en
General
-
Target
155c9c506cee10904d72d3e0ae8e92d8
-
Size
451KB
-
MD5
155c9c506cee10904d72d3e0ae8e92d8
-
SHA1
40ac2128cbfcad1283c876e871570f39f1d2f06d
-
SHA256
e4b7fe018cc44f997ae9c0a7e409f81dfdc2c6432f37151af254067438dcd3b2
-
SHA512
035f6903866ddb59797b3a3b67a8cb5fba8584c3d76cb78d4b44ed695630dd6ffe9f6e4a58a427c53ff436f5c135b8eedd2c2d58033ddf24b33affc3a47d2d79
-
SSDEEP
12288:RqIiWq4j4rm7IZsuVAM8932PnmXwQ87Yl:RviWq4jUm7CsuVXPnmgA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 155c9c506cee10904d72d3e0ae8e92d8
Files
-
155c9c506cee10904d72d3e0ae8e92d8.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 179KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE