Behavioral task
behavioral1
Sample
434082d4cb3c6d21cde7ef1edd9dda9c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
434082d4cb3c6d21cde7ef1edd9dda9c.exe
Resource
win10v2004-20231215-en
General
-
Target
434082d4cb3c6d21cde7ef1edd9dda9c
-
Size
133KB
-
MD5
434082d4cb3c6d21cde7ef1edd9dda9c
-
SHA1
e450150776def223440bf767b216872fa824e0e9
-
SHA256
129074efa3b605c72f9677157c7121981f4dbb175d75922edb14d569fb81f916
-
SHA512
83b1d87eb70aea4d0ba4edcb38a20ab7099385b06a4e93b6fe11cc2ecec221fdde866cbf6ceb66a65e648c5541ffbd217903cf24fd1780684cd5ee9408e996dd
-
SSDEEP
3072:MsXbL9Y2wzPK0c0pO/K9DASENPyalRy+a5orgcvQ:VbL9Y2wbF9DASEXlRc1cvQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 434082d4cb3c6d21cde7ef1edd9dda9c
Files
-
434082d4cb3c6d21cde7ef1edd9dda9c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE