Behavioral task
behavioral1
Sample
393f2b11be68b44eef3a296495d43351.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
393f2b11be68b44eef3a296495d43351.exe
Resource
win10v2004-20231215-en
General
-
Target
393f2b11be68b44eef3a296495d43351
-
Size
43KB
-
MD5
393f2b11be68b44eef3a296495d43351
-
SHA1
1f08f6ab5d358f5deabfd2b74591db9f506b4f08
-
SHA256
d74253c54801dd63e8fc4a4e11dbd4b4322f5b3bbbea23ba9af5a0ec10f322d7
-
SHA512
1107a74a8b79cd89720574f24174c1fc70b70f813e891e9a00a8b371d14a526c7c62e50141aae794350d7b92c3cb2c783b22607dd3371c3a7774244a74169e16
-
SSDEEP
768:9IrI3tBKWuJFD4janW7wQe2OWSdqWB779dyR2mSMfK26nbcuyD7Ua:9HZu/JWSMWt9dytKvnouy8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 393f2b11be68b44eef3a296495d43351
Files
-
393f2b11be68b44eef3a296495d43351.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 176KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE