Behavioral task
behavioral1
Sample
773fbee0b5e1cd9e8c1d3d900fcb78b5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
773fbee0b5e1cd9e8c1d3d900fcb78b5.exe
Resource
win10v2004-20231222-en
General
-
Target
773fbee0b5e1cd9e8c1d3d900fcb78b5
-
Size
2.9MB
-
MD5
773fbee0b5e1cd9e8c1d3d900fcb78b5
-
SHA1
2e9bc61694ce5ab5453bf0bc61e8df08a6bef1ec
-
SHA256
c6a71fa4ee8caa0254a2a03409e478ad58aefa13f6b6dcb5bebd5d7ef56fab46
-
SHA512
7881c652fab5d8e66488e109b90dcfdd15ead36a81922043391c36f9ffff8c84bffc4256091d8b90be8593ce6666775c7c2d3da1d863cd19fb58064204c65876
-
SSDEEP
49152:Zp1B9+fbr81NWvwPXrMubtg8gbs2P4M338dB2IBlGuuDVUsdxxjeQZwxPYRKs:ZpxeyPXZtg8ks2gg3gnl/IVUs1jePs
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 773fbee0b5e1cd9e8c1d3d900fcb78b5
Files
-
773fbee0b5e1cd9e8c1d3d900fcb78b5.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE