Behavioral task
behavioral1
Sample
394663a40ef932d613126c0d09824164.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
394663a40ef932d613126c0d09824164.exe
Resource
win10v2004-20231215-en
General
-
Target
394663a40ef932d613126c0d09824164
-
Size
138KB
-
MD5
394663a40ef932d613126c0d09824164
-
SHA1
3a4d03f9d829190843e2da62f73339033b978996
-
SHA256
1196440bc0e3f7eb4b2507f7b88435cefc1d3a41e5a7e7d00de9bdf32c2a38e9
-
SHA512
372fd47ae1129facb9642e87b9ffd79a191503c87aac98fe7a47201be72fa08b74aa8a1783310afb73b7acb608ab7343d99e07f40bac5c507c6f548a75a52c58
-
SSDEEP
3072:sr3KcWmjRrzSvr3KcWmjRrzSiDrgCD60OHTkgvICZPE8+8B:/Qzyvqpwp8+8B
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 394663a40ef932d613126c0d09824164
Files
-
394663a40ef932d613126c0d09824164.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE