Behavioral task
behavioral1
Sample
865bb05c69c31e9e7b2efa7a3c4316ad.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
865bb05c69c31e9e7b2efa7a3c4316ad.exe
Resource
win10v2004-20231222-en
General
-
Target
865bb05c69c31e9e7b2efa7a3c4316ad
-
Size
127KB
-
MD5
865bb05c69c31e9e7b2efa7a3c4316ad
-
SHA1
1b8b17068a82aac6c927ba6fff2b40a992c6483a
-
SHA256
b950c6f5eaf8dc710df0fe0231b46a3d140b6151be9a1d57fb6af02a439b5baa
-
SHA512
da705072428f8aa5420f08e29e644ffd50efca3f0556f1791dfdb78a3ba547ea633aaf9dd9f31ba60839b6e8cd9c296d754072b34dc5ef80dfd258dc98050f4c
-
SSDEEP
3072:sr3KcWmjRrzSMr3KcWmjRrzSnvRQE2104Ow/IaD/260NdFluy:/P3nlZwgm4Tuy
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 865bb05c69c31e9e7b2efa7a3c4316ad
Files
-
865bb05c69c31e9e7b2efa7a3c4316ad.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE