Behavioral task
behavioral1
Sample
798a91c544d02bcaa54a1de5bc672764.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
798a91c544d02bcaa54a1de5bc672764.exe
Resource
win10v2004-20231215-en
General
-
Target
798a91c544d02bcaa54a1de5bc672764
-
Size
56KB
-
MD5
798a91c544d02bcaa54a1de5bc672764
-
SHA1
18058d663037a08489402a5f737f577b95ca5427
-
SHA256
00e28e343bfc88fe5ed6f5e2a7454843dc22749dd45a0da449cc6b176a5f0938
-
SHA512
70ebb0d9401ed8cd6343fb913596ecb14133c71c6313977e333ca47595eea3d516902856aadb27b053111f4c0d41f6ea7ef17a34b3ad7d4de16d69c6e18670d3
-
SSDEEP
1536:NiQ6JDPuKthr2/cgFPu/ertASrS/ux+nouy8AJH:8ckr2/cgFPu/erDSboutAJH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 798a91c544d02bcaa54a1de5bc672764
Files
-
798a91c544d02bcaa54a1de5bc672764.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE