Behavioral task
behavioral1
Sample
158d3dbcb856c748f6e61487be43c4ec.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
158d3dbcb856c748f6e61487be43c4ec.exe
Resource
win10v2004-20231215-en
General
-
Target
158d3dbcb856c748f6e61487be43c4ec
-
Size
29KB
-
MD5
158d3dbcb856c748f6e61487be43c4ec
-
SHA1
9f136a776f230958b183d2e3504efd568d1bf151
-
SHA256
ca397e172a6bfeba0df79677f8797ae2e6cc672ca30709f079f7884ad88668f2
-
SHA512
83226a1b9edb75c2b6954fdf04b607fbebec4fe91b26ccf07276f15cbb80fcd223d7d8343bcf6db75a97973c16219c33f0269aa243e65a4c60f058556b342348
-
SSDEEP
768:ADWBKBJpJ9Iw1R54BAhXRXOHQF4l09yEXBt+:LBuJj9IwDlRXOHQd9Dt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 158d3dbcb856c748f6e61487be43c4ec
Files
-
158d3dbcb856c748f6e61487be43c4ec.exe windows:4 windows x86 arch:x86
ee94fee6d96573394df1ccff29966ad9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_tell
_rotr
_tzset
_umask
_spawnl
_stat64
kernel32
GetNextVDMCommand
GetDriveTypeA
GetStdHandle
GetSystemInfo
GetVersion
GlobalAlloc
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE