Behavioral task
behavioral1
Sample
387bffe7bf6f6abab351b8108a5a41fe.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
387bffe7bf6f6abab351b8108a5a41fe.exe
Resource
win10v2004-20231215-en
General
-
Target
387bffe7bf6f6abab351b8108a5a41fe
-
Size
5.3MB
-
MD5
387bffe7bf6f6abab351b8108a5a41fe
-
SHA1
9c8e6e4d1e5621d89d3c26d9ac45024e3bcab0eb
-
SHA256
79dd8da51abe06f0400194797f3dc6d30f4abf9252f8f4c8ee85fd97506a1758
-
SHA512
d0e8cec4ab5506a119f00173bf547507b69e925ad33261997d89c7378b16980749bbacc90cd85969f641c2d20dbd02d0187703ea49f59e0c0a500b7acacbd63b
-
SSDEEP
98304:Fyt8aNskNMcbQ0m43b4T9hQPdAvw8i0tXu8FNVagNb4T9hQPdAvw8:FyHlNHba4rQr6dAvwgZXFNVaKQr6dAvw
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 387bffe7bf6f6abab351b8108a5a41fe
Files
-
387bffe7bf6f6abab351b8108a5a41fe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE