Behavioral task
behavioral1
Sample
72721c12b34a7021931967fb2f9799c6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
72721c12b34a7021931967fb2f9799c6.exe
Resource
win10v2004-20231215-en
General
-
Target
72721c12b34a7021931967fb2f9799c6
-
Size
302KB
-
MD5
72721c12b34a7021931967fb2f9799c6
-
SHA1
d0e31772ed12bd91f2369aad6fddc7aac3dcfd73
-
SHA256
1eec296e3ade09af71c20ca3eea17dd9c3016667efc997a3133b2c3def123797
-
SHA512
e5ed16f046c2f0630ef5e825b54090855d9fa4a8aeda2d3a13c279af374c1109317385c8e5fffd9dda7a33e45f915fbf9673ef279d014c415636880e9a871be7
-
SSDEEP
6144:l3pUE2E7z2mjlqFKY6IZtOuBD6rR0CuiMT03mQ:l3p57z2mjlV2t9B2rOiMYm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 72721c12b34a7021931967fb2f9799c6
Files
-
72721c12b34a7021931967fb2f9799c6.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE