Behavioral task
behavioral1
Sample
239f2fd8d04d7e7f8f6fdd319c6d1b5d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
239f2fd8d04d7e7f8f6fdd319c6d1b5d.exe
Resource
win10v2004-20231215-en
General
-
Target
239f2fd8d04d7e7f8f6fdd319c6d1b5d
-
Size
2.5MB
-
MD5
239f2fd8d04d7e7f8f6fdd319c6d1b5d
-
SHA1
84594b0e02bc030d03a6aa92d9411f120d049ddd
-
SHA256
7225908bb8798c6ac8f451dcc051a9056f2d429b09600e9ff97879b4a9c64287
-
SHA512
e5b761ebb99f44c0db70d5069016f8710bc2718aa47841b69d1f213b91f190c5d1c206b37ad6f96e2309b63f7b6dc0bdf13e44f9fd0cd270439c46655deb9349
-
SSDEEP
24576:wGfxhkzt8SEw7Ez5HHdFUoSoPw7lYX7SUWBpz/BCByKOSuw9+GRhz5bNiGdkPpRh:VRQk1T7SoLW1YNfTP2Mcd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 239f2fd8d04d7e7f8f6fdd319c6d1b5d
Files
-
239f2fd8d04d7e7f8f6fdd319c6d1b5d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 6.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 159KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE