Behavioral task
behavioral1
Sample
281a78d7b6afb9fa92f1855d0d9db70a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
281a78d7b6afb9fa92f1855d0d9db70a.exe
Resource
win10v2004-20231215-en
General
-
Target
281a78d7b6afb9fa92f1855d0d9db70a
-
Size
117KB
-
MD5
281a78d7b6afb9fa92f1855d0d9db70a
-
SHA1
9bb59f59e47b69d2cb147026cfd6420fdd85846d
-
SHA256
8dfc024d736f6f044e50d2e7ffd80bb4eff3904b7c88d4369f8060187ca5c061
-
SHA512
978d6dc898197f478dc7e6feb0e82639f4e7eeb53809ceeebe6c82127376a3cfd21bf6c8988cdeb3fef6b888334b2576754bb7f3a4517b18b58dca6b889cefca
-
SSDEEP
3072:ARoCpF9Ki43J+fa/ymNnZC+bUYD2YAMYvQd2a:ARj45+faqonF4R1a
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 281a78d7b6afb9fa92f1855d0d9db70a
Files
-
281a78d7b6afb9fa92f1855d0d9db70a.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 484KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE