Behavioral task
behavioral1
Sample
24495827866c05bb2f4008cad4134286.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
24495827866c05bb2f4008cad4134286.exe
Resource
win10v2004-20231215-en
General
-
Target
24495827866c05bb2f4008cad4134286
-
Size
605KB
-
MD5
24495827866c05bb2f4008cad4134286
-
SHA1
c000f9ff1e2a71d1ebe660bf70a0b7ed2c5b6459
-
SHA256
292d66df509f1bc9518437a124e706651b81d840f3c4fbd211f9de104200c899
-
SHA512
8bc08763f57a4f56f7a3d27fb6aeaeb5e9b29903a2f3dfb58af20fb4a0ba17f4c5a6e5e51cc2249c2af0879a635f6a7a5d9198601e7b929b34f28189a823d950
-
SSDEEP
12288:i5Z0QOk7kmnQdcjdQ5f2uTevYZNIJuKipHm:U+QOk7DQCjdQ5+uav4NVa
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24495827866c05bb2f4008cad4134286
Files
-
24495827866c05bb2f4008cad4134286.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE