Behavioral task
behavioral1
Sample
15d709e6a5af1125f73728edeab7d108.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
15d709e6a5af1125f73728edeab7d108.exe
Resource
win10v2004-20231215-en
General
-
Target
15d709e6a5af1125f73728edeab7d108
-
Size
1003KB
-
MD5
15d709e6a5af1125f73728edeab7d108
-
SHA1
d6e906893b73a27f8527165d03ea00615fbf142c
-
SHA256
17434d8fce5f31e788d96d34284e9f94c4a5af6ad72c610e0854a85f5f9db776
-
SHA512
0efe367d862234c44eaca4b23157117d40a96fef0a927ea1c7691c4ad5816d0ed203f4e12d64db74b96acdcdec3e805c324586f17cbde028df27e72a461a5c09
-
SSDEEP
12288:aO887Beyy7/o25tbXF2rRJTEjI0uj/TbRHC1BMG9zoxepKbTaUci952AT4n6wkKy:aNff2dNjPRifMytPC2t+Q2HGP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15d709e6a5af1125f73728edeab7d108
Files
-
15d709e6a5af1125f73728edeab7d108.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE