Behavioral task
behavioral1
Sample
28705e3229c77922fca4342fe0d7f6d4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
28705e3229c77922fca4342fe0d7f6d4.exe
Resource
win10v2004-20231215-en
General
-
Target
28705e3229c77922fca4342fe0d7f6d4
-
Size
105KB
-
MD5
28705e3229c77922fca4342fe0d7f6d4
-
SHA1
1840f2915f688c2de395914a2acdb9db07fa6164
-
SHA256
ca55b18a2a2609fa4f5d7adb1c013a8444fb1810d9b956766c4b3d34406e80a6
-
SHA512
46bfe265fa80c55fb1d635c05c1ffbda2b51863796f506ea989b522fec2315ee1032bca867243e36d3ae81d877d15bcdf6e04ebdb276a2a3a6a3a548ba97b92c
-
SSDEEP
3072:aQhazCortXw/lwWmqd9seacFLqY+Doutir:axmVlwWrMelveoSO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28705e3229c77922fca4342fe0d7f6d4
Files
-
28705e3229c77922fca4342fe0d7f6d4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 103KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE