Behavioral task
behavioral1
Sample
15feb9961f91549f17ed63a83f7b1989.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
15feb9961f91549f17ed63a83f7b1989.exe
Resource
win10v2004-20231215-en
General
-
Target
15feb9961f91549f17ed63a83f7b1989
-
Size
114KB
-
MD5
15feb9961f91549f17ed63a83f7b1989
-
SHA1
49fc4c7e8443e72198b309ad26fe614af7741eaf
-
SHA256
e0bd49c1e26a9e77c86d32477d8712c1aa91dd1f04d82659b5b1d1cf4d921391
-
SHA512
7391b49e81f5814532eb1c268e703e8cd1b88b8c1440c047a82f23a3e1944f8b6de4e20a9d797ac6c35a5de03524e9e24439fff4e54f7c6eaab172e5ae3ddcbe
-
SSDEEP
3072:j2oc3bzvUsKC/7ElDna1M7cz2Wt0kCgbd6:jqzvUb07ExO2VkCmd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15feb9961f91549f17ed63a83f7b1989
Files
-
15feb9961f91549f17ed63a83f7b1989.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 18KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE