Behavioral task
behavioral1
Sample
22b42433ecbf5e1a8204e0fbf5b88bb8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
22b42433ecbf5e1a8204e0fbf5b88bb8.exe
Resource
win10v2004-20231222-en
General
-
Target
22b42433ecbf5e1a8204e0fbf5b88bb8
-
Size
1.5MB
-
MD5
22b42433ecbf5e1a8204e0fbf5b88bb8
-
SHA1
8c17302619e27f2e30ef9799c24a294ba8607e6d
-
SHA256
edcb8fdcbe88c3d580df04074e04a76d36d4cb37aa580da7e57ac4b217a2e181
-
SHA512
f3712a9705c9dd54bbdfe6982fc1781dba817b100143028bf9096fbdb8e16ecd98f3085f9373d070e79a69d855af2d1cebfd501026f00c1215e4415aada1771f
-
SSDEEP
24576:Jzeiiv7PFDZiZ8wFLXRdd57HAaZ1HwjHhVY4l6e0I1OQ5sZON7ovW:JyiC01FLXRdd57HAY1QzhVVtElw5y
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22b42433ecbf5e1a8204e0fbf5b88bb8
Files
-
22b42433ecbf5e1a8204e0fbf5b88bb8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE