Behavioral task
behavioral1
Sample
701fa9dec7852a1e40ea839ea7f0615e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
701fa9dec7852a1e40ea839ea7f0615e.exe
Resource
win10v2004-20231222-en
General
-
Target
701fa9dec7852a1e40ea839ea7f0615e
-
Size
133KB
-
MD5
701fa9dec7852a1e40ea839ea7f0615e
-
SHA1
c2f5ab9348ae425366e79636f13757ecdee3706f
-
SHA256
990a428a9d7401fc113003882524871ee5c20de4808783ccb39ac7ac98d77a9f
-
SHA512
24caae1d28670150866dd54f09304890068e0ee904284470ec07dc9cdf77dbadd717c8b34895cac69bbd0e0e3f87206343e15766f698308ea258ebde339a59f9
-
SSDEEP
3072:YYKBIs/acJLSpKdXZAxnb3tBPASL6FnNSnohrosUjYVwlEuohzwjv0ZQ:YtBF/adKdsjtPLRyMsU8VwlEuKcD0ZQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 701fa9dec7852a1e40ea839ea7f0615e
Files
-
701fa9dec7852a1e40ea839ea7f0615e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE