Behavioral task
behavioral1
Sample
22a2d0fc9b5665c4354da38f5a4451ff.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
22a2d0fc9b5665c4354da38f5a4451ff.exe
Resource
win10v2004-20231215-en
General
-
Target
22a2d0fc9b5665c4354da38f5a4451ff
-
Size
15KB
-
MD5
22a2d0fc9b5665c4354da38f5a4451ff
-
SHA1
e166a4a54978f050bda22de07ebbdd4798205330
-
SHA256
c735db3dd86505c028d3a81fe53bac34575f1004c446a9af67f020548e676f22
-
SHA512
46b4bb86ec6288147d824ed077954c2faccba520051937f1169e9b8f1606919433c1575a4e77faa31baa76ed051a99e7146e2f33344ce5acf1d007f0aea1e4df
-
SSDEEP
384:Yb8bM0q6Hag18wnYP3XGec0VdIvuwjuWHHU85Rfg3XkH:YwbDq6HagGnU0VanVx5O3UH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22a2d0fc9b5665c4354da38f5a4451ff
Files
-
22a2d0fc9b5665c4354da38f5a4451ff.exe windows:4 windows x86 arch:x86
b48c08c2b91cbeb00081797daf9dfe8c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
SetHandleCount
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SUE Size: 1KB - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE