Behavioral task
behavioral1
Sample
22ad4dc4ce16d7fe951caf1215ec71ad.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
22ad4dc4ce16d7fe951caf1215ec71ad.exe
Resource
win10v2004-20231215-en
General
-
Target
22ad4dc4ce16d7fe951caf1215ec71ad
-
Size
302KB
-
MD5
22ad4dc4ce16d7fe951caf1215ec71ad
-
SHA1
8ef3feffa22ebef383228cb92d300806c1bdddb2
-
SHA256
5e0221700146cb4418abe8d05b429d3718fb6fb348092d3b3b844c0127e7b677
-
SHA512
dedbf8f568b7a878d61e61b759a18404dde1132863107dc645235bdb66708b20ad71c1dffdd09875a2f47272b1c6af4a5d9f0687cea565e5f47dd0785da66a53
-
SSDEEP
6144:2YU9jYE9LzKzbw8tYlsgcjoWmUtf2rrmQ:ZE9LzKzUmKcszUtfum
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22ad4dc4ce16d7fe951caf1215ec71ad
Files
-
22ad4dc4ce16d7fe951caf1215ec71ad.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE