Behavioral task
behavioral1
Sample
264d0058a8ae04d32c9c4b8d90ba6725.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
264d0058a8ae04d32c9c4b8d90ba6725.exe
Resource
win10v2004-20231215-en
General
-
Target
264d0058a8ae04d32c9c4b8d90ba6725
-
Size
93KB
-
MD5
264d0058a8ae04d32c9c4b8d90ba6725
-
SHA1
95caeea2b9ebcb98526ac1a40901c5de460eb339
-
SHA256
30da68f8833f220e81a0469c7d9069f43d03fb5a03bcaf8be31b9265aba720c4
-
SHA512
fd66d0ee23c7421fd82807629bd491e53173ad2f565c0a44758b18c8e827948826a007c1007dd61958f767fb342ce62ce5f750cb5d372c86d0e01ce150a9f859
-
SSDEEP
1536:SKcR4mjD9r823FBev5c6kfsm968NhlRZMJOZAVDQyknpu/fwQFtihAZH4b5:SKcWmjRrz3/eRzrBqhRMJOZAVDSpu/Op
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 264d0058a8ae04d32c9c4b8d90ba6725
Files
-
264d0058a8ae04d32c9c4b8d90ba6725.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE