Behavioral task
behavioral1
Sample
218cd87646b58095105c5f6258665520.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
218cd87646b58095105c5f6258665520.exe
Resource
win10v2004-20231222-en
General
-
Target
218cd87646b58095105c5f6258665520
-
Size
133KB
-
MD5
218cd87646b58095105c5f6258665520
-
SHA1
2eb79cd7e762091fc33b94a9a100d21f8282b3cb
-
SHA256
bb6f00e60681812c8127b075208fbe842dabb4d6fb8550220b0fca9ba1b681e0
-
SHA512
0f787745161d9df04131e9a1baf235d01c5e31b3e60b6fe19dc3f281ce092152ceaef1afec3cba095301709b7fd38e428dfc860cda69794f351afb13e37e2317
-
SSDEEP
3072:pD9C13q5n9kEcSSwWO0bcbXb2CKD3BLinpXHtMHBztV7NxSpC0K86fS7Q:psCdcZwmbczbpKD3lQp3qB9/SQ0MAQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 218cd87646b58095105c5f6258665520
Files
-
218cd87646b58095105c5f6258665520.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE