Behavioral task
behavioral1
Sample
393ccc0bba9a600df7f73a345f8a8cba.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
393ccc0bba9a600df7f73a345f8a8cba.exe
Resource
win10v2004-20231215-en
General
-
Target
393ccc0bba9a600df7f73a345f8a8cba
-
Size
180KB
-
MD5
393ccc0bba9a600df7f73a345f8a8cba
-
SHA1
36bb0b9e459f73d2dcd0982ae9b95c40a9abcf0c
-
SHA256
e151b995fb09d1c0757da64eb7195e12aeafdbbbb3d19d187cdd9dacd1c57eb6
-
SHA512
2bf2216539e8e214ad6736cf37f836b953383d0afc78bc23522eb7ed4bb02d81b84ac13e38787923bd7d9402cb53bcbc22f9fa3b0e97e3a3bb1c9874a34797a3
-
SSDEEP
3072:coJphldCo+zl31g6UVw2ZsxaTbImc34KhA9W9pZNR0vqS:dPhl85l31g6UYmctq94ZDaZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 393ccc0bba9a600df7f73a345f8a8cba
Files
-
393ccc0bba9a600df7f73a345f8a8cba.exe windows:7 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE