Behavioral task
behavioral1
Sample
166e29904d383fe6093fb4439439d59e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
166e29904d383fe6093fb4439439d59e.exe
Resource
win10v2004-20231215-en
General
-
Target
166e29904d383fe6093fb4439439d59e
-
Size
23KB
-
MD5
166e29904d383fe6093fb4439439d59e
-
SHA1
82a2cc777aee1725ea0ffa2f55864f30dc03a043
-
SHA256
e16ce0a1c5e0cdb57e09d3fb3823772351688f835c83bc119a1fa2d8cdd06513
-
SHA512
e50656e8c73788ef1db181423486d06c1c7081a1e004cfd1ffa2026dcce43d458f1f0f7fea888ccf15ffaa9d1008af7838d6acc53daa86b92ee7f93b7f8096fa
-
SSDEEP
384:5kpmJWQjCt+XmBwFzb6D+AtCGH4lOueZTu+/pLsBvCxbz8UfHi:5kpmJb7ywFatNH4wu6TuSpLjbzA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 166e29904d383fe6093fb4439439d59e
Files
-
166e29904d383fe6093fb4439439d59e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 428KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 221KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE