Behavioral task
behavioral1
Sample
295494d3e3a1f7fd5a960869909056db.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
295494d3e3a1f7fd5a960869909056db.exe
Resource
win10v2004-20231215-en
General
-
Target
295494d3e3a1f7fd5a960869909056db
-
Size
133KB
-
MD5
295494d3e3a1f7fd5a960869909056db
-
SHA1
0b7a054f78e658f9b4be999534d4a3ed3da92bd3
-
SHA256
4285489a48bcaae5e2a8c65dec068bb0c6ed3079b201ccb664b3fd0442482299
-
SHA512
88a52b0f3d4deaa4a75e64874633b8586917c76778ec2e067b1b7da85971fca8ae393764bd7f7c5c2072f30869dcbe089484699b3a273fd595d008572d456fc5
-
SSDEEP
3072:uFcKK6xYaXZ0qj38SwyHuBSPIx84nW3yXnZloRqqSDBQ:u1TOk383yHuBUUqCwRcdQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 295494d3e3a1f7fd5a960869909056db
Files
-
295494d3e3a1f7fd5a960869909056db.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE