Behavioral task
behavioral1
Sample
417ff2e92cd78cdc2852eeb7eb89b05c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
417ff2e92cd78cdc2852eeb7eb89b05c.exe
Resource
win10v2004-20231222-en
General
-
Target
417ff2e92cd78cdc2852eeb7eb89b05c
-
Size
107KB
-
MD5
417ff2e92cd78cdc2852eeb7eb89b05c
-
SHA1
920930aefbb46a57d4b52ab0f60b2abd6144a35c
-
SHA256
c64154f324d0cc72a2a838b0e82e37bcbcbfae466bc5492cdd12275d6a2e500d
-
SHA512
52bfade66a604b4d170a9ca65b64f3b5c8503f729a2e60bf4431543414cf8a3dcae11e010e00af8a581388b2b9048d8e217857dedd66323d86c27958e1310e31
-
SSDEEP
1536:ZGGqF9BCnJqKB2wjzYdzDfirY07ITFMJcQaSftpMDL:ZGGqFfmISzkzDOH6FMJc1Sf3cL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 417ff2e92cd78cdc2852eeb7eb89b05c
Files
-
417ff2e92cd78cdc2852eeb7eb89b05c.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE