Behavioral task
behavioral1
Sample
214ef31c768cbfe49180ebd698e591ad.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
214ef31c768cbfe49180ebd698e591ad.exe
Resource
win10v2004-20231215-en
General
-
Target
214ef31c768cbfe49180ebd698e591ad
-
Size
52KB
-
MD5
214ef31c768cbfe49180ebd698e591ad
-
SHA1
2f5761a0c158bd1f4c153e0c92aa58549793dee9
-
SHA256
cb736d7fd265a5e990f5c946534970e5efbbf3aeeeaf3fd64c3b2f4a67a7a2ad
-
SHA512
fe8e8c45ce7079b8d7cc0a6025a1ee48d52921d915b95f8fdffb105376c302ef01b662f9c4df985e25ceddfbb54fb86d759ba19a07b3c36e6ec764074de25d9c
-
SSDEEP
1536:uadGrlrtGh2G8OK3JfhaxFSRTRdwM4TI9:QZkh2G853JfhoFStRP4k9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 214ef31c768cbfe49180ebd698e591ad
Files
-
214ef31c768cbfe49180ebd698e591ad.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 45KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE