Behavioral task
behavioral1
Sample
562d9f212b9d19ec9bc8eea2c6ea26eb.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
562d9f212b9d19ec9bc8eea2c6ea26eb.exe
Resource
win10v2004-20231215-en
General
-
Target
562d9f212b9d19ec9bc8eea2c6ea26eb
-
Size
133KB
-
MD5
562d9f212b9d19ec9bc8eea2c6ea26eb
-
SHA1
12df4f7c89527341cf19a35dc682054df5752977
-
SHA256
46d5bce48e68f828d15e8ac506cf50c35c810e04fe1d61fb050ec45ddee51648
-
SHA512
fea1b6ef06bdc8517e0a5c593caab0488b585c98c26330210d5df38678da08ff7c3f527e5b781b2fae820d3726b4b34af64dcc09ef70e7808a4a14b12f908017
-
SSDEEP
3072:UL2AETSJu2J8uKz4IQquVb3rcalhGvXLq6Cg0A9Vk/QXQ:7A4SJu2Jy4t2aPG/e6p08kSQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 562d9f212b9d19ec9bc8eea2c6ea26eb
Files
-
562d9f212b9d19ec9bc8eea2c6ea26eb.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE