Behavioral task
behavioral1
Sample
376c019249787cba17843dcefc64c341.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
376c019249787cba17843dcefc64c341.exe
Resource
win10v2004-20231222-en
General
-
Target
376c019249787cba17843dcefc64c341
-
Size
2.4MB
-
MD5
376c019249787cba17843dcefc64c341
-
SHA1
63040282a18ce3ae8d37ad03eb52974ec17d59a0
-
SHA256
e2d8dc7556c85e90edb6054f89fd1491f858ed66b460ea0339e1ea18f28b5323
-
SHA512
e84fbb7f0f431e394d09fe440d8df48167e63c2df671c2c809310f7ba293423b8484b5347e2437e8269a30579527f13010d93dc2e0247b86e21651b0855fb7bb
-
SSDEEP
49152:HqGzq1XNthuWYewHENwnyuBuS3rsDKUzP4M338dB2IBlGuuDVUsdxxjr:7mDthur59yuMTzgg3gnl/IVUs1jr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 376c019249787cba17843dcefc64c341
Files
-
376c019249787cba17843dcefc64c341.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE