Behavioral task
behavioral1
Sample
93d463679eee56b8292e06041f242d57.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
93d463679eee56b8292e06041f242d57.exe
Resource
win10v2004-20231215-en
General
-
Target
93d463679eee56b8292e06041f242d57.exe
-
Size
1.9MB
-
MD5
93d463679eee56b8292e06041f242d57
-
SHA1
39d7c73d3033ce8adf78aba67d0b55853dd8d456
-
SHA256
774681d820f449fe35191a1df7027c23131348656b567f894ffc2c5fcbaea0a4
-
SHA512
a796370d83ca877927a97720ff2b79d511949a5c72b5b4bbd40ffd8e369b1cac279138c5d4fcc1555af1007be77b40c1b6a5350d65ae4755a7b24e42522f3957
-
SSDEEP
49152:seuAZe8Lxi1QPLqSFm43HUa4ik4vtnhZeCCrik:scgm41BsXUWHoCCf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 93d463679eee56b8292e06041f242d57.exe
Files
-
93d463679eee56b8292e06041f242d57.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tn Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.f Size: 512B - Virtual size: 4KB