Behavioral task
behavioral1
Sample
377347123099d8ec36976f88e715ecec.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
377347123099d8ec36976f88e715ecec.exe
Resource
win10v2004-20231222-en
General
-
Target
377347123099d8ec36976f88e715ecec
-
Size
302KB
-
MD5
377347123099d8ec36976f88e715ecec
-
SHA1
865b41e0300733edaf9bcd2f49f7ac3b3f2c5c8f
-
SHA256
2e46f57f8f88332cb51c950f0c80567b843c3c8fd81bf30152d7e45ebd803f37
-
SHA512
4e44f13bbba963b6bf98b701ca1b24d47b7be4f78369bf99024e73786c61606122fe29df8a50820d4ad48a9f4bea7075c1aa57b3282c64992f45c14b96432cb3
-
SSDEEP
3072:bF0wUkuoxh77wseoEAtZm7OQNcvwC7wknfLMcqY0T8syJCKKz4tBJ36VWcHqNkjk:Z0wUBq75AO41RU0YssCKK0jJ3afKwmQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 377347123099d8ec36976f88e715ecec
Files
-
377347123099d8ec36976f88e715ecec.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE