Behavioral task
behavioral1
Sample
881c2d30946bbb72665edd68a74c164f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
881c2d30946bbb72665edd68a74c164f.exe
Resource
win10v2004-20231222-en
General
-
Target
881c2d30946bbb72665edd68a74c164f
-
Size
342KB
-
MD5
881c2d30946bbb72665edd68a74c164f
-
SHA1
bf1ba666f75467544955fed2307029038631fa0e
-
SHA256
6b36565092b894cc36fbc798c4a3108a337c27561d2f38eebf774ca0993e1853
-
SHA512
f9b380840d30775321c40300609d5c61ead87689178905539d53fca62432201a6fa8b11e823005a0ba9dcf0eaa7bacdde93dc4a83966529b80aa4e876291d372
-
SSDEEP
6144:z6gJbaRkNJvY2k0bsRkcQRkfIwps+69yV9Goa0ixEHzBmcrBlVZU++R3:Zbm8qN0bFciRwf69GxiKTBvVZgR3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 881c2d30946bbb72665edd68a74c164f
Files
-
881c2d30946bbb72665edd68a74c164f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 338KB - Virtual size: 340KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE