Behavioral task
behavioral1
Sample
701eaf53706af90e19f76a5a2e26a202.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
701eaf53706af90e19f76a5a2e26a202.exe
Resource
win10v2004-20231215-en
General
-
Target
701eaf53706af90e19f76a5a2e26a202
-
Size
266KB
-
MD5
701eaf53706af90e19f76a5a2e26a202
-
SHA1
6b1d0cc1a99f336bed06a9751de0c0f1f08ebe13
-
SHA256
c50a3c90cd12569a7086cda509922618de39d5ca309957a6f27a5617d8fc536c
-
SHA512
b963423f2ab0c9944ff7b1861fed843762d0b1dd2c706dba2a94e18705c7e175577c263f3c66c9d7ee36a81df84ad44b3ec1e2a1845816cdfa3db033a0203e1d
-
SSDEEP
6144:s56wpIzChA4PIY5Qzu8N0IQx03gjkqtd8CkSuFF2YrUh8Q:s56wp7AV4+fTQxd1yCdPhN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 701eaf53706af90e19f76a5a2e26a202
Files
-
701eaf53706af90e19f76a5a2e26a202.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE