Behavioral task
behavioral1
Sample
215212cc078d78de45faa8e0949f746b.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
215212cc078d78de45faa8e0949f746b.exe
Resource
win10v2004-20231215-en
General
-
Target
215212cc078d78de45faa8e0949f746b
-
Size
10.2MB
-
MD5
215212cc078d78de45faa8e0949f746b
-
SHA1
2ee57d0c7b5bd1516a2c8ebb28bc559c2b7e2bb0
-
SHA256
10b51cfbf94be3c6e715c7d0de9c6f83527971a7dd8a482a94021dd784b0b0e0
-
SHA512
006aa32701b7ed528d605d678932877e63115d87aa26a23409229570655e1aecf418a50dab7b44c3a3759bd6e4e9bdeb9a338eb08e2ecf19ada311920880f1d6
-
SSDEEP
98304:OgK31eaBeR30g2yOEjjs9/g3RJEAxjwjFSBv+gv30g2yOEjjs9/g3:YFdHZUju/qEAQSp+LZUju/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 215212cc078d78de45faa8e0949f746b
Files
-
215212cc078d78de45faa8e0949f746b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE