Behavioral task
behavioral1
Sample
72ed36f2b4cb5bfd50a02f41b60211fe.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
72ed36f2b4cb5bfd50a02f41b60211fe.exe
Resource
win10v2004-20231215-en
General
-
Target
72ed36f2b4cb5bfd50a02f41b60211fe
-
Size
133KB
-
MD5
72ed36f2b4cb5bfd50a02f41b60211fe
-
SHA1
6e103b0917bc879b86945dd3e0274f0f88c8db33
-
SHA256
cb5b65c4d450b605b0fba1aac658c384bd43666875aa74c0469248ab670febac
-
SHA512
f21dd51a9d24fbdedae3bbc64ca524b92d925c5afb94749bc178a60a6195094a20cb206813a41ef885eeef8c742cfc285b5a0c560816a02488b42fff7944d9fa
-
SSDEEP
3072:blN9RkkkkkkTLJ0Y6LFrD8GK1BVAUXSjJ/p:5dkkkkkkZ6ZrAt1Bdi
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 72ed36f2b4cb5bfd50a02f41b60211fe
Files
-
72ed36f2b4cb5bfd50a02f41b60211fe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 74KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE