Behavioral task
behavioral1
Sample
23b2b6cf19ca5483d3146b67040f578d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
23b2b6cf19ca5483d3146b67040f578d.exe
Resource
win10v2004-20231215-en
General
-
Target
23b2b6cf19ca5483d3146b67040f578d.exe
-
Size
29KB
-
MD5
23b2b6cf19ca5483d3146b67040f578d
-
SHA1
bd88c610bdb0f9661001ac9bbe8e1c6414220283
-
SHA256
585ecd762837c9bdaa7ca0e8ca73548627ee5e4bd7b9200c3d50b58731db4ce9
-
SHA512
fe3391e36c280af36ab842e0b721f0a9c1aefe0f867bc9ad30c001df1361f59ca7e9cbf1b9a8bd93da1883a82e163e1817985e2cd0f6f062bd8c27a65c760bba
-
SSDEEP
768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/u:AEwVs+0jNDY1qi/q2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 23b2b6cf19ca5483d3146b67040f578d.exe
Files
-
23b2b6cf19ca5483d3146b67040f578d.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 511B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE