Behavioral task
behavioral1
Sample
219d0916adff999e13abf180231ad552.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
219d0916adff999e13abf180231ad552.exe
Resource
win10v2004-20231215-en
General
-
Target
219d0916adff999e13abf180231ad552
-
Size
1.1MB
-
MD5
219d0916adff999e13abf180231ad552
-
SHA1
c2bc2c0358acf7ad957a52b1ab4d3a9305f8afe4
-
SHA256
64c4b96fb483138ace5ac80895bd30d1d95a7e1d526b8a8eb4fe1e2f57bd799a
-
SHA512
011383435e05883cdf884063ef5805fc7681641ab3e8ef4c192599d2c2210d09ece5c9a0b8777bc3e74177c705c605c36c821fbcce958fcea5c2ccda46aecdda
-
SSDEEP
12288:Q6t/08n6hkAW2adY8+QGXVfo/j0ofb2s0xmPMVqeAaPcP0bMDChZ4Pu+O6odlkNy:Q6S86badYrfGLzFPMVdAD0YCqO6ob06
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 219d0916adff999e13abf180231ad552
Files
-
219d0916adff999e13abf180231ad552.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 760KB - Virtual size: 760KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 311KB - Virtual size: 312KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE