Behavioral task
behavioral1
Sample
179f8664a320f43e08beee43f0b4a6a4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
179f8664a320f43e08beee43f0b4a6a4.exe
Resource
win10v2004-20231222-en
General
-
Target
179f8664a320f43e08beee43f0b4a6a4
-
Size
1.3MB
-
MD5
179f8664a320f43e08beee43f0b4a6a4
-
SHA1
b0a00d2187e881e2cdff34b2a3cae53cbbdd28ee
-
SHA256
4f98d49591fd8b5af6e61b99844acdd31d7fc156d6dd7f07b8da939516c9c1b5
-
SHA512
fdab5c7d992d2dae1dbf9897f7b30db29bb83f69d3929e0912cc3edfda668db4c604a071818a3560f0ec1ca840e4df25b3c86f3e0a41a32fcf59f04176d3f60d
-
SSDEEP
24576:KLTcN5pdNgKTHZY0kG5UKU7lsppR0LPoP2ZMZu/BvG:EAfreG5FRbUpsD+c+c
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 179f8664a320f43e08beee43f0b4a6a4
Files
-
179f8664a320f43e08beee43f0b4a6a4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE