Behavioral task
behavioral1
Sample
87931c520195ca72cf9f7ebe5437129e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
87931c520195ca72cf9f7ebe5437129e.exe
Resource
win10v2004-20231222-en
General
-
Target
87931c520195ca72cf9f7ebe5437129e
-
Size
257KB
-
MD5
87931c520195ca72cf9f7ebe5437129e
-
SHA1
17dbbd977735ef17d2d162823d626a9d4dc3708a
-
SHA256
ded38ecb83bf5213446660b3de3943b875209cb03fcd5fea3791f143a6249a16
-
SHA512
e6e6ef75b2ec64a126578ca6be6e0b9f24c6176ce3fe291fd68f3daded87de53bf25ce1cbaa05999541641bb8b5a5c079d4645b9b659f857a1a5e2f25803405e
-
SSDEEP
6144:oJjs0RyTYNKaAqbMCoyfSKT8Fs5BPryBQc9ldMCTPSro:oJw0RyUKju/7fSDFOryGuldMiSr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 87931c520195ca72cf9f7ebe5437129e
Files
-
87931c520195ca72cf9f7ebe5437129e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 420KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 250KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE