Behavioral task
behavioral1
Sample
150c52a161ee0af6fccc16518b572737.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
150c52a161ee0af6fccc16518b572737.exe
Resource
win10v2004-20231215-en
General
-
Target
150c52a161ee0af6fccc16518b572737
-
Size
2KB
-
MD5
150c52a161ee0af6fccc16518b572737
-
SHA1
d7bef6de510475c0d10f4e0c5e6c7ecd5dd1c5cc
-
SHA256
8f0a1b2c736945594c646bdab70803401e0a4312d2713729686a34ae14ddd4ee
-
SHA512
1eca802b5e4e2797c2dfd37187ba45e2deed51ea0621b226846a3a2ebdb7d34b1833bc8e9b3b7aea129c43f5e7f172bb1f15802b926e03eda1fbab7ff4feebb8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 150c52a161ee0af6fccc16518b572737
Files
-
150c52a161ee0af6fccc16518b572737.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 484KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 219KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE