Behavioral task
behavioral1
Sample
38af14522e14907431330363eb465745.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
38af14522e14907431330363eb465745.exe
Resource
win10v2004-20231215-en
General
-
Target
38af14522e14907431330363eb465745
-
Size
428KB
-
MD5
38af14522e14907431330363eb465745
-
SHA1
ab27373f723aa9776d5c2c908467aa85a2a5a14a
-
SHA256
c3b0662ff4a52e70dd3160e4b60a45d64eb6c86cda6019c1cf6d140c7e663453
-
SHA512
5a65067068bb2011b9641beef8399585a48e3822b25e6bcf884267daaca310c2b29e8dfdf6ceda34d3f7ebddac9d1b2dc2bfc3c7c3807b4b74b9aea669dc7fb7
-
SSDEEP
1536:AT2mjqf03QZXc/Dd8l5QbSU5WwUPyXLxyIdQ4KCCMVo8U08QW8QblW:AiS3ks/Dd8YWUUPyXdvlJLtQb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38af14522e14907431330363eb465745
Files
-
38af14522e14907431330363eb465745.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 380KB - Virtual size: 380KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE