Behavioral task
behavioral1
Sample
379909a680ee7125c461507234a7e7b7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
379909a680ee7125c461507234a7e7b7.exe
Resource
win10v2004-20231222-en
General
-
Target
379909a680ee7125c461507234a7e7b7
-
Size
124KB
-
MD5
379909a680ee7125c461507234a7e7b7
-
SHA1
3eda20c94259807f6979fb829c6bc0ba371a1789
-
SHA256
4d488363312f664f2b53cd0a7895560b0df1c45659bdf55ea690c9a160eda648
-
SHA512
4d3ddcdb20f7fe5d15b0f5e032b9b8e5449f877d8e1eb7d7663c4e2bf6e1213ac7771c394dab80b8524c2e71e983cfa3e5365b7475879e59572970ab1f697662
-
SSDEEP
3072:PM81zd1qhvBzirkVtoexGROprZ6M6RxFfs9JKpout1:0e1q9B2YViexKirZ6npfs7KpoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 379909a680ee7125c461507234a7e7b7
Files
-
379909a680ee7125c461507234a7e7b7.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 160KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 122KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE