Behavioral task
behavioral1
Sample
23c7a0db1a53cf718eac995bc715dcbe.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
23c7a0db1a53cf718eac995bc715dcbe.exe
Resource
win10v2004-20231222-en
General
-
Target
23c7a0db1a53cf718eac995bc715dcbe
-
Size
359KB
-
MD5
23c7a0db1a53cf718eac995bc715dcbe
-
SHA1
7ee7dfaffb323982c78fac1332d7491c565b95e8
-
SHA256
041aff4805b1edd252edc9d02e12f26fc7a9488da71a66e74805ae1c2223f9b3
-
SHA512
5a699d0710060b5d1680d62ef3c93c623af27907273764e1e5813c7ed3ed8d0c6713dadf603662a643f67df073200455842805f64fe54b5086dc5e4805968f04
-
SSDEEP
6144:/Q6aS1DBBhjMkxC0vtLcyS8jgrQsTf1a4ggiAV4WWmaTi16:/Q6TDhYkBcyfyPg4ggiAmuQi8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 23c7a0db1a53cf718eac995bc715dcbe
Files
-
23c7a0db1a53cf718eac995bc715dcbe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE