Behavioral task
behavioral1
Sample
804beb25ebdfae9def663d960db7f10b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
804beb25ebdfae9def663d960db7f10b.exe
Resource
win10v2004-20231222-en
General
-
Target
804beb25ebdfae9def663d960db7f10b
-
Size
2.9MB
-
MD5
804beb25ebdfae9def663d960db7f10b
-
SHA1
233c91f22c42ea08ac0e49241e6ee1656bc2b135
-
SHA256
8d4f95076379ab6c133235ca3c579425e362fa37ccf1f330fc3bae86409cb0ab
-
SHA512
dac4575b33eeebe235bb1658c2c8a2a35ad524c1a0295d10ed0af57452076cabb529c2f70dd2312eece88eec6c779132b4e5ff43361c0c6e229bfa3af808d82e
-
SSDEEP
49152:gra1UbEO1ZojEfABW4SL3vkwOvoP4Vo98WshAw+822RDQ5p4Djsr:LWbEoZoXuL/mvoP4VGHshAfitQ5Ajsr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 804beb25ebdfae9def663d960db7f10b
Files
-
804beb25ebdfae9def663d960db7f10b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE