Behavioral task
behavioral1
Sample
245841f4c775ca85c04689b8216678f5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
245841f4c775ca85c04689b8216678f5.exe
Resource
win10v2004-20231215-en
General
-
Target
245841f4c775ca85c04689b8216678f5
-
Size
2.8MB
-
MD5
245841f4c775ca85c04689b8216678f5
-
SHA1
917a87523d0e4b22d64acd0ddeb581b001aeb919
-
SHA256
a3125e7b6fdffcaf40da68e134d41be07361fff055ea868fb3b899f9aafd177d
-
SHA512
a45f268fca5e59e79a072ac80804375e61920cab14cf227e75b096999a0a07a95852d5e007798e5409b89ae6cdde9d2c59d133b03e260d9a8dc2fe829f1f016a
-
SSDEEP
24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7NxqUkHE6pQPxQ2JyP2r5mJV91j:SCqm2Jpr0nNM7Dus7Nx2kCqm2Jpr0nv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 245841f4c775ca85c04689b8216678f5
Files
-
245841f4c775ca85c04689b8216678f5.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 616KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE