Behavioral task
behavioral1
Sample
394f9ff1baa65beda1efbc00e851aa40.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
394f9ff1baa65beda1efbc00e851aa40.exe
Resource
win10v2004-20231215-en
General
-
Target
394f9ff1baa65beda1efbc00e851aa40
-
Size
1.8MB
-
MD5
394f9ff1baa65beda1efbc00e851aa40
-
SHA1
f123441f63aea7420d17d4f4a9b8f722c592090a
-
SHA256
492776f1d3d4661a237de5053141920b51a7439ef309707bb92232493d84002a
-
SHA512
66474f273a0bc5b94677dd40dce871bf9c60905545e0e796d2405ff12d7f5334a09a0722cf1e8a02539d21e362e697e6fd7659e73e0277d11b127c2b5bd259b5
-
SSDEEP
24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7NxqUkH+:SCqm2Jpr0nNM7Dus7Nx2e
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 394f9ff1baa65beda1efbc00e851aa40
Files
-
394f9ff1baa65beda1efbc00e851aa40.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 616KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE