Behavioral task
behavioral1
Sample
089b034062d131c441db518f9ea1771d1a9304def815d19c98d4d5de759d37d5.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
089b034062d131c441db518f9ea1771d1a9304def815d19c98d4d5de759d37d5.exe
Resource
win10v2004-20231215-en
General
-
Target
089b034062d131c441db518f9ea1771d1a9304def815d19c98d4d5de759d37d5
-
Size
6.3MB
-
MD5
be7219c4a0d1ef86bf0e77427074a5cd
-
SHA1
d06e8b96889dd80761f483d10c23256340362f70
-
SHA256
089b034062d131c441db518f9ea1771d1a9304def815d19c98d4d5de759d37d5
-
SHA512
8686e1e5665e9cca044469d2ffa2d46dc4df6f1f9f394e1a4f4b2b302bc366de25e0ead187e6fea059e60980fa7ce7580c977acb5e8518293aec3dd401aa6139
-
SSDEEP
98304:uqGD0xVJuM3+VilzcHR21nMO+CFSkW8nktKMqIFfKukiAxI5zfZ+Q:uqBWx6PSAnklgK5zR+Q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 089b034062d131c441db518f9ea1771d1a9304def815d19c98d4d5de759d37d5
Files
-
089b034062d131c441db518f9ea1771d1a9304def815d19c98d4d5de759d37d5.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 7.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5.6MB - Virtual size: 5.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE