Behavioral task
behavioral1
Sample
258ebcfe0f1e0915395a8a3b4f0a4e7a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
258ebcfe0f1e0915395a8a3b4f0a4e7a.exe
Resource
win10v2004-20231215-en
General
-
Target
258ebcfe0f1e0915395a8a3b4f0a4e7a
-
Size
11.7MB
-
MD5
258ebcfe0f1e0915395a8a3b4f0a4e7a
-
SHA1
db81067a077240d40467f2d49560cd46a17fb69c
-
SHA256
d3107f851c7000896c0afc38d39f8fb92eb3d30d782f2ae0de9865b0f7bf59c4
-
SHA512
d48f304edc8256e919cfbc08285a73cbe6ee43a2dc0c1f3c0196488d682d977bf539f3985264373ee58cdf211ea3b68bfc66c1fc4720ae1bf55ae4134895823b
-
SSDEEP
196608:DK1H0H8lYWCfQ02kP1bWCZTeBaycqgIH9WCfQ02kP1bWC:DK1He8aNJ1bje4yccNJ1b
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 258ebcfe0f1e0915395a8a3b4f0a4e7a
Files
-
258ebcfe0f1e0915395a8a3b4f0a4e7a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE