Behavioral task
behavioral1
Sample
252d97a66ee10666b873baed8b9093a2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
252d97a66ee10666b873baed8b9093a2.exe
Resource
win10v2004-20231215-en
General
-
Target
252d97a66ee10666b873baed8b9093a2
-
Size
5.3MB
-
MD5
252d97a66ee10666b873baed8b9093a2
-
SHA1
c208af3550701c53923ee5dd0b2dcb004d7c3a32
-
SHA256
0dd073f3eb7d7d9e0f0c72276df0987e32108cc4db7a511b53e50cc951c9a6f7
-
SHA512
31b5892b15a57058299f393e6e1a92b0875fcf18a3de0045bfb6a36ac81db445b3eefbd97beb6958d02098583a5e1962646586733ee1da95d2d79e67d2a85650
-
SSDEEP
98304:Utp4Xm5oyuiOjzbbvLrA1WHAG6EcZl9NLFwjpQtXLrA1WHAG6:UomYiOvbbDrAsgRNLFCkbrAsg
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 252d97a66ee10666b873baed8b9093a2
Files
-
252d97a66ee10666b873baed8b9093a2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE