Behavioral task
behavioral1
Sample
14bd6931f25fd645bf7d88579986141a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
14bd6931f25fd645bf7d88579986141a.exe
Resource
win10v2004-20231215-en
General
-
Target
14bd6931f25fd645bf7d88579986141a
-
Size
2.6MB
-
MD5
14bd6931f25fd645bf7d88579986141a
-
SHA1
85bd37705e09805ab7bc5759029181a282c5bce9
-
SHA256
b0b0cbff7fc15e0fdc44239c42dcc130ac274130aeb3e1fd7f104b0e3602f10d
-
SHA512
35d4e66d8d334119ee07b8246d4b8a8c458e3af871dcd47cc5608acccc75456c4ede45d4788d9d0dc8c925c9ccffac9500eb8231d17b2ba01077beac88eb17c6
-
SSDEEP
49152:gsRmgPKW93zWnGIKGT9zsLMvj1mrBD8xqWeKli3mIay3:FmgiW96sGxhj/5G3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14bd6931f25fd645bf7d88579986141a
Files
-
14bd6931f25fd645bf7d88579986141a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE