Behavioral task
behavioral1
Sample
7192205724ca20e108e544499e68a1f0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7192205724ca20e108e544499e68a1f0.exe
Resource
win10v2004-20231215-en
General
-
Target
7192205724ca20e108e544499e68a1f0
-
Size
1.3MB
-
MD5
7192205724ca20e108e544499e68a1f0
-
SHA1
2bd9eb50f758483c3f76660011c656fb2ed87d95
-
SHA256
fbd1d495a4c0fb2d0c155715260e4aee5284c29e2ace09b5946107df567e13b1
-
SHA512
b1d3196e5031572b4ec8178f4873e83d09ce4074f47945d4081721cc9733b33f3d6679f510d25078d3a351934c864abc208f5dcc784fbb9ac0e4d4aa1eb9543a
-
SSDEEP
24576:X0fgQO9AZ+70lyrvQyMmFuJngU8TeBA1o9O+x591sZ1vG:Qy7Uyrdn0Jg4i1o9O+x591a
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7192205724ca20e108e544499e68a1f0
Files
-
7192205724ca20e108e544499e68a1f0.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE