Behavioral task
behavioral1
Sample
465224c01dadb8ff7d14fb755206ff56.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
465224c01dadb8ff7d14fb755206ff56.exe
Resource
win10v2004-20231215-en
General
-
Target
465224c01dadb8ff7d14fb755206ff56
-
Size
302KB
-
MD5
465224c01dadb8ff7d14fb755206ff56
-
SHA1
8fa3fc79d59e869e645133231b59f98111e0363a
-
SHA256
1f4ebb959b722ce620b0bc1ccf6d83c645baf43a42c8a504232270276c905519
-
SHA512
52ab92aac38544516bec53be563448cfbf5c1424487f6ddf73f799f8a8924d0da27b84bbb95ef50ed3762150e80b2a27c8267e879846b2a7637a7f27bf490a82
-
SSDEEP
6144:pV1NRD+DEL+VMXXEyXXtJlH83roMo4e4mQ:pBh+DELjXXE4dDH87mYm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 465224c01dadb8ff7d14fb755206ff56
Files
-
465224c01dadb8ff7d14fb755206ff56.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE