Behavioral task
behavioral1
Sample
395cc8a543136f0cdbae6c660304b684.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
395cc8a543136f0cdbae6c660304b684.exe
Resource
win10v2004-20231222-en
General
-
Target
395cc8a543136f0cdbae6c660304b684
-
Size
32KB
-
MD5
395cc8a543136f0cdbae6c660304b684
-
SHA1
4f50db41fb0afb0072f40532e17bd199e2c2c72c
-
SHA256
3430dcd901c01f2f95e9e75b14a7c8d8ac90faca8c4fd7b44a5f186299b5d8ad
-
SHA512
94c9301477458b144a8a1cb4bd3b22921c60a93ca3d4a4c5a71def9d7ca70915c6519215c418fa6bda4cf956116a16300382f181c85a35c1185335c9ea6c490c
-
SSDEEP
768:XocAX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIocVSEFLtf8hx:SKcR4mjD9r823FLChx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 395cc8a543136f0cdbae6c660304b684
Files
-
395cc8a543136f0cdbae6c660304b684.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE