Behavioral task
behavioral1
Sample
879e2599bd02078024900e3e61ef93e6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
879e2599bd02078024900e3e61ef93e6.exe
Resource
win10v2004-20231222-en
General
-
Target
879e2599bd02078024900e3e61ef93e6
-
Size
192KB
-
MD5
879e2599bd02078024900e3e61ef93e6
-
SHA1
ffbbed968883a4c8e2b14f07dae239f591af035f
-
SHA256
3387570fde0116d0599bf4c7823cdd18a66943e91c49b2226e33649a3d12d927
-
SHA512
b8ab6ee479eaa511a584e1b9238fd1a06104e4798e0a9786e1e1436f1ffcb64f8856f054a3f0f199749f0dc7fb699a137cc6888d97123927c7840d7e58e0c44c
-
SSDEEP
3072:zC1xRMdlr2N6YbicJBycfZeuw45iKQrJXiTc2oc9rzbzmO17YxBYULoUUfYoke1N:zeMD2N4WycheTOibSRrrL17YxVLodlQG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 879e2599bd02078024900e3e61ef93e6
Files
-
879e2599bd02078024900e3e61ef93e6.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 196KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 186KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE