Behavioral task
behavioral1
Sample
15ecc8b8662a30d520c271d8052a2123.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
15ecc8b8662a30d520c271d8052a2123.exe
Resource
win10v2004-20231215-en
General
-
Target
15ecc8b8662a30d520c271d8052a2123
-
Size
2.8MB
-
MD5
15ecc8b8662a30d520c271d8052a2123
-
SHA1
98d34f825425f7dd4c297069efd1c7eb8c737453
-
SHA256
07ac2a7819c62e5002411ddacdaf61dfd10fc74fdc4bb865b51f5163e6e9146d
-
SHA512
88299b8a2fee61f6e462072f2ec564746063810974637110877e1ace32e4662a7d28f64f9ba8dd9bef005f904f59c1403dcc40a085556957f30576d108d10a0d
-
SSDEEP
24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7NxqUkHE6pQPxQ2JyP2r5mJV91e:SCqm2Jpr0nNM7Dus7Nx2kCqm2Jpr0nq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15ecc8b8662a30d520c271d8052a2123
Files
-
15ecc8b8662a30d520c271d8052a2123.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 616KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE