Behavioral task
behavioral1
Sample
73cb3e99f251fc591833eb98d63797c4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
73cb3e99f251fc591833eb98d63797c4.exe
Resource
win10v2004-20231215-en
General
-
Target
73cb3e99f251fc591833eb98d63797c4
-
Size
102KB
-
MD5
73cb3e99f251fc591833eb98d63797c4
-
SHA1
cebd80a5eabee437c2027edee916f3402a2d5925
-
SHA256
e54032de7a37394b05b673990ca82b0ddb74a2762efeb51c412e59fe0dedd40f
-
SHA512
62041108db5b2d450d4fd7e6c0fb0b79516f414d83d27515cc1291c45f1c1fbfba07e4d957531d109a055131763044fe58eb09351d36ca03f9c91d80658e3849
-
SSDEEP
1536:ugYvmWQPvPCznXhN0OaNaTYSGiCNGAYAX/ptV2ckjvcBWufabuOgG1KukJiwlHPJ:hdVCzxN0OaMFCr/3PkDc2b3gG9kJier
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 73cb3e99f251fc591833eb98d63797c4
Files
-
73cb3e99f251fc591833eb98d63797c4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 360KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 98KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE