Behavioral task
behavioral1
Sample
386370120e883e241b12ef487ccc4594.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
386370120e883e241b12ef487ccc4594.exe
Resource
win10v2004-20231215-en
General
-
Target
386370120e883e241b12ef487ccc4594
-
Size
133KB
-
MD5
386370120e883e241b12ef487ccc4594
-
SHA1
2afd7fcd88790e4109d24b574e0a9096ca072dc3
-
SHA256
77385e5a289e3a3b28a0dbdba0d845723b47978a4dd15de2d21aa3a3412995d5
-
SHA512
a2a25bac08ec728a4da7cf54c6f9217f93613cac3d21c03a3c4824a5c2f709b2a4206bf28d1dd14e3e4bc7f92215723c7b1a9ca54c3b0f58a07a7235b7112f28
-
SSDEEP
3072:jSONjmyv0oeoJcouPJf4lKCf7a/gxz7vHbaeRbHrXmsFeTNv7aNWo6ZgQ:jS678oeKcoyMKySgHzaa7CsFed73/ZgQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 386370120e883e241b12ef487ccc4594
Files
-
386370120e883e241b12ef487ccc4594.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE