Behavioral task
behavioral1
Sample
279fa920af7ad682471f8850fa2846e8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
279fa920af7ad682471f8850fa2846e8.exe
Resource
win10v2004-20231215-en
General
-
Target
279fa920af7ad682471f8850fa2846e8
-
Size
317KB
-
MD5
279fa920af7ad682471f8850fa2846e8
-
SHA1
594df5c0abd7d25f3b8b84f3dd36f3985201a350
-
SHA256
f650845b8f9307cec80b2479b5ca33335601175785576a5e853931c3238cdeef
-
SHA512
c267abbce6722d23d20b21d4c994e8e2c44e189eafdb53b1de4af1d43e21530e9a6710d0cedd1fa6f13b168666a3605d9603ed11582ddd80c868d032a8b967a1
-
SSDEEP
6144:hGFi4RR6TnbVVW/H69lpJCj27wNPY5T2L/T+Qs3y9F2:hmRcLAH6zG2Itb+e9F2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 279fa920af7ad682471f8850fa2846e8
Files
-
279fa920af7ad682471f8850fa2846e8.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE