Behavioral task
behavioral1
Sample
14b0fa36bd20edaebaaebc26fd4ab582.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
14b0fa36bd20edaebaaebc26fd4ab582.exe
Resource
win10v2004-20231215-en
General
-
Target
14b0fa36bd20edaebaaebc26fd4ab582
-
Size
136KB
-
MD5
14b0fa36bd20edaebaaebc26fd4ab582
-
SHA1
6682be3a01971ef26f063db38db10927894edabc
-
SHA256
4872793dabc2aba0390996a3b31269e6ccdf489c919c38a3850a084e00316a17
-
SHA512
484b95986b06cf54c3ca401c5cdd57c89f3b4b660945b95eeee04b93a2f86f11c8c1007fd63330b031629f4a860b0f5651aae888e0b765c5fecd8c0dc76b6874
-
SSDEEP
3072:gFaFRTQOJ+cKB+jjgu7PyDXCMl19pH5+HIuxGiqcU9IFGouvN3:8ET+u7KDPF5iIiqr9ToE9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14b0fa36bd20edaebaaebc26fd4ab582
Files
-
14b0fa36bd20edaebaaebc26fd4ab582.exe windows:10 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 164KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 133KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE