Behavioral task
behavioral1
Sample
15936bf3f22bda76515a03e9aeef455d.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
15936bf3f22bda76515a03e9aeef455d.exe
Resource
win10v2004-20231215-en
General
-
Target
15936bf3f22bda76515a03e9aeef455d
-
Size
2.6MB
-
MD5
15936bf3f22bda76515a03e9aeef455d
-
SHA1
1dae6de9a323bd6db94bea71e179a9669b6e6bf5
-
SHA256
4ec6df5fb287025b5bddc8be298cefea023e02fe353ee5312bfc64bbed12003b
-
SHA512
a6a0d032f70e149f899fc342623d1fa3accb2ba285dc17d2b5d3e6aaaea6bba891c786c8753c61d5ca9b65d2e776fb7ef4c5d30a9804d4a07a6c3e02e060e5ee
-
SSDEEP
49152:dom6bQGWqnXKFK2ayZfXTnahF8x3L+PHbay3:dA8hBDTqj3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15936bf3f22bda76515a03e9aeef455d
Files
-
15936bf3f22bda76515a03e9aeef455d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE