Behavioral task
behavioral1
Sample
14d4c15656097734051bfde669f14deb.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
14d4c15656097734051bfde669f14deb.exe
Resource
win10v2004-20231215-en
General
-
Target
14d4c15656097734051bfde669f14deb
-
Size
894KB
-
MD5
14d4c15656097734051bfde669f14deb
-
SHA1
075c0bb96f41eea10235937ebe43cab20b5da58d
-
SHA256
8f2b41ad1e45714ef4176e7ddbfabdd9e8eae3350505bd2b869e88958cb0e6b2
-
SHA512
08cffb8d543c0a0bea9dd670bfbb4c3c65c6870ea360909c8b9c680e30b505e53a43cb6c26571051000849bd73bb357cae3fef572c9229797c5e7e3472d1f8cd
-
SSDEEP
6144:QGzRxSVtp0l6whGfsKR+zkBpTaa5tJH7cHANUTNhGX5PnJl3M:jt0VPFfsKAkrbPl7cHANUTNhGpE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14d4c15656097734051bfde669f14deb
Files
-
14d4c15656097734051bfde669f14deb.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 796KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 153KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rol Size: - Virtual size: 1B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE