Behavioral task
behavioral1
Sample
44f0b7d2c65b3ee3c01935cdaab25fe0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
44f0b7d2c65b3ee3c01935cdaab25fe0.exe
Resource
win10v2004-20231215-en
General
-
Target
44f0b7d2c65b3ee3c01935cdaab25fe0
-
Size
133KB
-
MD5
44f0b7d2c65b3ee3c01935cdaab25fe0
-
SHA1
ba1098888fc80285a258237fd2081a4000b788e9
-
SHA256
15b51ea33341e4765fca089a0eae7df1fc3cfd7e54fea12086e65294aa60821b
-
SHA512
626fccfe8496c654558dccbc831b28e27d7a9869741fa8fb23b913432d1ecbcfcd4a1c74b6a726785ed24ee86f0d363b974c96fb6a7cb83eed316ae25d22a476
-
SSDEEP
3072:YYKBIs/acJLSpKdXZAxnb3tBPASL6FnNSnohrosUjYVwlEuohzwjv0NQ:YtBF/adKdsjtPLRyMsU8VwlEuKcD0NQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44f0b7d2c65b3ee3c01935cdaab25fe0
Files
-
44f0b7d2c65b3ee3c01935cdaab25fe0.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE