Behavioral task
behavioral1
Sample
23d15ae55547e6b9b179a501c65b8ed6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
23d15ae55547e6b9b179a501c65b8ed6.exe
Resource
win10v2004-20231222-en
General
-
Target
23d15ae55547e6b9b179a501c65b8ed6
-
Size
124KB
-
MD5
23d15ae55547e6b9b179a501c65b8ed6
-
SHA1
1ffb400c07e7899f5ea860a34cbd7caa8f37ae54
-
SHA256
2cc90bf1999bd32deb2ed3cfd71b24a94a65ec7819281d5e8ffd0ca39c0bd367
-
SHA512
ac4401e2d3cec35f4bfa9e82a94b5afe50cc53ed883209bb16c1228f18024241a7f8916a492ff15914726aabea949208e975ca6045753fca4a5328619568e1c4
-
SSDEEP
3072:Rocp10BLsNgzZYAe5LlFAbNCK5XTjsCUvAxo4T1outR:CcpeBL2gfe5LcNC6XzNPoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 23d15ae55547e6b9b179a501c65b8ed6
Files
-
23d15ae55547e6b9b179a501c65b8ed6.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 988KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 121KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE