Behavioral task
behavioral1
Sample
864501c18518ff69bd66e5e676f5412d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
864501c18518ff69bd66e5e676f5412d.exe
Resource
win10v2004-20231215-en
General
-
Target
864501c18518ff69bd66e5e676f5412d
-
Size
133KB
-
MD5
864501c18518ff69bd66e5e676f5412d
-
SHA1
c05035a04fdba0f0e9fd461b4b4c73ad171a3c7e
-
SHA256
e0582ba533348517184546829db9e4d07cc9e2498d939edb944acbfdc3a7912b
-
SHA512
edfa32b54ea35739664094bbc598fd08c8130534c5b590b3654c11fe825736f1952f1ffdd02f5828634b6451c48559553dec8d542cd21e774a11b5faf7754cde
-
SSDEEP
3072:+342Bn788wfUXvb8O/WUXvGAyZVxSTROs1iQ:+3Tn487B1lykssYQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 864501c18518ff69bd66e5e676f5412d
Files
-
864501c18518ff69bd66e5e676f5412d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE