Behavioral task
behavioral1
Sample
379002ee3ffe9bb1692181c02ec87074.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
379002ee3ffe9bb1692181c02ec87074.exe
Resource
win10v2004-20231215-en
General
-
Target
379002ee3ffe9bb1692181c02ec87074
-
Size
133KB
-
MD5
379002ee3ffe9bb1692181c02ec87074
-
SHA1
60f61978b51e266aa38f54bb8e838837f57c8422
-
SHA256
2f84abac8e1ac0c782afc648da121820e1d14e544b2a78fa3f734aea39eec140
-
SHA512
8c8a63c4e8b49429412ff2d3c5d287e7514545644bc2277b23acda0af747cac9f3ae2e6a27f8eb2c28bf36e1853866731439bf4441dc7fba54419ce69b62c25e
-
SSDEEP
3072:GFWqdLhCWzfI/zhIYfJz0+RpFWNYPCnUjduhYSORMD+3hvqhMfQEQ:GBVkWeyYflLFWNYPCYEY1KDmhvkhEQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 379002ee3ffe9bb1692181c02ec87074
Files
-
379002ee3ffe9bb1692181c02ec87074.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE