Behavioral task
behavioral1
Sample
2241c83bde6032530162d69b01fb1a93.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2241c83bde6032530162d69b01fb1a93.exe
Resource
win10v2004-20231222-en
General
-
Target
2241c83bde6032530162d69b01fb1a93
-
Size
188KB
-
MD5
2241c83bde6032530162d69b01fb1a93
-
SHA1
596ee557db626c28f52dc04765ae38293fee767b
-
SHA256
6d0ac0106b296783c8bff58a99e42ebe82702e41764bc88c7440d32376676442
-
SHA512
aac547b9149de6be03f3e46a2617d571ac38557f2fa396711f63c6dd763918c44f2ad734ded97f31bbc1c806e00e95b43f941313a297c1b72111d05465de8d50
-
SSDEEP
3072:foEx57NVwMLxTaK9sj5wK2ZksV8HPwvsSaCdyES1MwYtuBECp1houtM5m:fVAMJp9sjLzEcIvs8yBMwmu6Cp7oSMw
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2241c83bde6032530162d69b01fb1a93
Files
-
2241c83bde6032530162d69b01fb1a93.exe windows:10 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 136KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 184KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE