Behavioral task
behavioral1
Sample
177f240790407c19fdd7520d44acc3f3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
177f240790407c19fdd7520d44acc3f3.exe
Resource
win10v2004-20231215-en
General
-
Target
177f240790407c19fdd7520d44acc3f3
-
Size
1.3MB
-
MD5
177f240790407c19fdd7520d44acc3f3
-
SHA1
14b48e181ba946461ec622431d5941af0251a63e
-
SHA256
1ab51fe4524344354853979fec7dd49be76a48894e4012b35947ccac203b6423
-
SHA512
657f6284e8778bb62442d756064df3e4da3a2a97a1af1c6d69cd12bd035c94f1d9d46073d440cf8c37afa2781dc5744831040016b113c7e87d293e613cdfdc41
-
SSDEEP
24576:yw6edGb9F0Fd+DrgbARORTF2IluKk73apA3aatAtCQMj4/Ew9402EmU9/9Us:P69R+FwRRORTF2cuK+l3ahtj64884LaD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 177f240790407c19fdd7520d44acc3f3
Files
-
177f240790407c19fdd7520d44acc3f3.exe .ps1 windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 141KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE