Behavioral task
behavioral1
Sample
71023bd69480a620a2b88b4086da04cf.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
71023bd69480a620a2b88b4086da04cf.exe
Resource
win10v2004-20231222-en
General
-
Target
71023bd69480a620a2b88b4086da04cf
-
Size
1.6MB
-
MD5
71023bd69480a620a2b88b4086da04cf
-
SHA1
8b1559661bbab3707d07b5d78a60918ec61f3ca9
-
SHA256
1577ab00271175bd28c56cf4c190bc7df6971276294e6d378db4f0be84007d52
-
SHA512
be2603bc23ddd046ec23aec4417b5ffc5e3cdf8649a5d71dfb1b84adb6b4829f48bed696c1edb606a011a2c1d0ce8a9f52b4da460ba157e6a3102f7cd70d9fb5
-
SSDEEP
49152:svNZCA+tmq4oKscakLz00SB1ClQZmngAacakLz0O:svNZ/+tVpKscakc0i1ClQZmngAacakcO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 71023bd69480a620a2b88b4086da04cf
Files
-
71023bd69480a620a2b88b4086da04cf.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE