Behavioral task
behavioral1
Sample
166d9e8d6699f333b62fc19aaa5dba9f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
166d9e8d6699f333b62fc19aaa5dba9f.exe
Resource
win10v2004-20231215-en
General
-
Target
166d9e8d6699f333b62fc19aaa5dba9f
-
Size
247KB
-
MD5
166d9e8d6699f333b62fc19aaa5dba9f
-
SHA1
241469e1275c263259a50fbc54cd68d709f51e09
-
SHA256
b8e6cdb27f6cdd5970944bf28ea8f32bdafcbfbd775212f0aff47b0e12d068b9
-
SHA512
73fc7f12d3734f231359806531076d4d5e16efc8cd66463e0cc740e25173a14139bec30ba33d5d36af1450613cf96f01df25333ac9875fa5a4638feb64fc6fda
-
SSDEEP
6144:2aUUj0hJ31A9ySr1Qg7RwpsuacFDQcWsoS:ovhJ3RSrCg7RTcdEsoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 166d9e8d6699f333b62fc19aaa5dba9f
Files
-
166d9e8d6699f333b62fc19aaa5dba9f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 744KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 241KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE