Behavioral task
behavioral1
Sample
747f2d4165ca65cf6d0a4fcd7371a032.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
747f2d4165ca65cf6d0a4fcd7371a032.exe
Resource
win10v2004-20231215-en
General
-
Target
747f2d4165ca65cf6d0a4fcd7371a032
-
Size
2.0MB
-
MD5
747f2d4165ca65cf6d0a4fcd7371a032
-
SHA1
bfa593285d7d1be6b41f634bfe6cf758ab263cf5
-
SHA256
20307b04a172132a30f7e0b4bade38300060f4b1aaf74ac08b076767d5c2c87b
-
SHA512
a63e33a072b5c4d23b9db433523c4b8ca6c108fdb913f87aad22967ef1ef753509e4df5beffef97f2e0c93f78f87c4e8a44a810fbf73df5d339fbdb048579b60
-
SSDEEP
49152:kTAFT1iO/VkjvCFGQ7ai7D3xTgOxYwpKv6N9YwS0weDpzuGQ7ai7D3xTgOxYwpK:keT1LVkjvCFD2i7D3xkOxYwpKv6rrwur
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 747f2d4165ca65cf6d0a4fcd7371a032
Files
-
747f2d4165ca65cf6d0a4fcd7371a032.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE