Behavioral task
behavioral1
Sample
89c3e0e30404b5d3d287f8a70b9a9d54.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
89c3e0e30404b5d3d287f8a70b9a9d54.exe
Resource
win10v2004-20231222-en
General
-
Target
89c3e0e30404b5d3d287f8a70b9a9d54
-
Size
127KB
-
MD5
89c3e0e30404b5d3d287f8a70b9a9d54
-
SHA1
3d6752ca0853b707d2fc3be95d6a882c4bd199e1
-
SHA256
e2ab009f14ca487e3aa9d2650a7ce33fe3499a09215c8068c98adf1bf734a638
-
SHA512
13219555e15a0005231a2b1d96fb596fe834a3fb12352bee2951f274e2496ecd91c982c9ca2f03822fb764e1caaf75cc78dee49ef39647075ed4cd68866f27db
-
SSDEEP
3072:iXlsP4HJgDhElT7I/S3Fe06NhnbYaKpfC9xMSHwWhswDHEw:RPQOyT7I/uFe0UEaKowWueH7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 89c3e0e30404b5d3d287f8a70b9a9d54
Files
-
89c3e0e30404b5d3d287f8a70b9a9d54.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 192KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 132KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE