Behavioral task
behavioral1
Sample
2141ee6bdbb059b8da3505ed22544ffa.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2141ee6bdbb059b8da3505ed22544ffa.exe
Resource
win10v2004-20231215-en
General
-
Target
2141ee6bdbb059b8da3505ed22544ffa
-
Size
133KB
-
MD5
2141ee6bdbb059b8da3505ed22544ffa
-
SHA1
fbabd0969e1b83d2603ef76e343a043f961ae155
-
SHA256
4f046df52a23e2e06cb39224b4f401b42b430449e0ee39b4be523c156213902b
-
SHA512
25472864d41b6b047e4f0778a8caf4294af38ab72a963fc668ae0b175f84763525a1957ae76d7d53a9b77c63cc63488656da8a36cc202f1b240117cbc2f63f53
-
SSDEEP
3072:867ffxxtm/YfsdNLABg9Pn1rnLA9FLkx4tzIBzNKGd1EQ:867ngvdn9Pn1rnLcLk6t8WS2Q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2141ee6bdbb059b8da3505ed22544ffa
Files
-
2141ee6bdbb059b8da3505ed22544ffa.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE