Behavioral task
behavioral1
Sample
2300ddeb0d31ac36d69350a0697a4321.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2300ddeb0d31ac36d69350a0697a4321.exe
Resource
win10v2004-20231215-en
General
-
Target
2300ddeb0d31ac36d69350a0697a4321
-
Size
477KB
-
MD5
2300ddeb0d31ac36d69350a0697a4321
-
SHA1
475151b499b37daa165237a8a6127122681d5b0d
-
SHA256
bdef3bf4c82cfe10200b8f2b33ef9cf0a3cdd54c7553aa48aa94e5d9442bd283
-
SHA512
7c447aace0a309407f118e22b16f0c07187e46369c274c8ca28f68ba9b6237e11f5fae0f0a3dbeda81ebec5b5ba166950f802f03d693c4d63c3ec2d647eca4b4
-
SSDEEP
12288:dZ9upFBR+X/GfL2EZT2P8/sqxcC4I1UKzB+tYasyf/3AoS:MpNQGfL2EZqP8/sqn4IBF6YZy
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2300ddeb0d31ac36d69350a0697a4321
Files
-
2300ddeb0d31ac36d69350a0697a4321.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 19.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 473KB - Virtual size: 476KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE