Behavioral task
behavioral1
Sample
72f2c0d0219a96d4d58e2b2318488ed4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
72f2c0d0219a96d4d58e2b2318488ed4.exe
Resource
win10v2004-20231215-en
General
-
Target
72f2c0d0219a96d4d58e2b2318488ed4
-
Size
1.5MB
-
MD5
72f2c0d0219a96d4d58e2b2318488ed4
-
SHA1
e6b5dd941ce68bb1e4f4e034499cc0659e106a2c
-
SHA256
e7548b46d7f8fd80168a791e02954e884e822518461a255608339d1c27f2eba1
-
SHA512
45729283436c548acd6b2510748091560c5a1e6b51c00c8078327c86370e6340298bf8e73c91bd9214d0648b38be68ba5584374f7957f49fb162b8a605d9403b
-
SSDEEP
24576:IQtwG88Y4oykSHC+IAW3kp+dpLB0rHi2Y0GQzTVxYrNZj8/qKDV:IADZY5ykeC+IAW3kypN0rC2KKVxqWDV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 72f2c0d0219a96d4d58e2b2318488ed4
Files
-
72f2c0d0219a96d4d58e2b2318488ed4.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 460KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 242KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE