Behavioral task
behavioral1
Sample
17fcbf59a97724b353498eabcff0ff80.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
17fcbf59a97724b353498eabcff0ff80.exe
Resource
win10v2004-20231215-en
General
-
Target
17fcbf59a97724b353498eabcff0ff80
-
Size
49KB
-
MD5
17fcbf59a97724b353498eabcff0ff80
-
SHA1
8aa7de0e123301b632d2b1e9a292acd278b8d3f6
-
SHA256
87245d24dfd18c68a97f7ea7b7c46c276e01f39d5977e0260dbfdf35ba98b46d
-
SHA512
a903bb5d60ca32b827335933026cebcb5a17ccc2d2b9168a6c5e913a8f947df7046e3f4d395f8af520b5fbde748069b1e76e27634ff0e7dd970c029d1fb1fc55
-
SSDEEP
1536:FrSZ8IwFpmoUcnef1wlaP/n/qRcxfJI3iqGpB:g8TFQoUMefvfTzpB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17fcbf59a97724b353498eabcff0ff80
Files
-
17fcbf59a97724b353498eabcff0ff80.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE