Behavioral task
behavioral1
Sample
277091c6aa13cdcf3ad33fd92e38fe07.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
277091c6aa13cdcf3ad33fd92e38fe07.exe
Resource
win10v2004-20231222-en
General
-
Target
277091c6aa13cdcf3ad33fd92e38fe07.exe
-
Size
104KB
-
MD5
277091c6aa13cdcf3ad33fd92e38fe07
-
SHA1
ce98a293af34ce408d03a76936e90addbd8bf729
-
SHA256
203d96daf15ab5a7169af287d94b64002237131f57fe085c303e7ee9561f4bee
-
SHA512
fe7021a94ffe923d4a259d794a1bccd24cd553246dff6d77035eae9ff3a77bca60b4e6044635573a8e1b0adf7230ad409c6fe64c4cef3314c1c7c03705a3a91c
-
SSDEEP
3072:sL0m5goRB/8AbOr4DZTDcelVUj+YXqwi:sfgibM41jUj+wqwi
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 277091c6aa13cdcf3ad33fd92e38fe07.exe
Files
-
277091c6aa13cdcf3ad33fd92e38fe07.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 116KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 72KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tbzkpmg Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE