Behavioral task
behavioral1
Sample
993abcdb83c1233cd870f513a4867f4c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
993abcdb83c1233cd870f513a4867f4c.exe
Resource
win10v2004-20231215-en
General
-
Target
993abcdb83c1233cd870f513a4867f4c
-
Size
2.0MB
-
MD5
993abcdb83c1233cd870f513a4867f4c
-
SHA1
f94b7184ade5078d41579a337f99669d8ff5ece1
-
SHA256
cf19692078434d3d7909325b7f05de7eef223b8f5efd650ddc06c07272e0f017
-
SHA512
3c717bd3047fa53d542031c7f0af0f8090a2dd0c3b08aa65a31d114908909885567c6524610098f2214f4f2ef7521ea4b6e1ea521f48f095560cb28adb39c873
-
SSDEEP
49152:vIfeA7Ya9S72kO3QGQ7ai7D3xTgOxYwpKIa54N9U/8ZXyWRtr+YOGQ7ai7D3xTgp:wGAcES72f3QD2i7D3xkOxYwpKT54Nm/g
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 993abcdb83c1233cd870f513a4867f4c
Files
-
993abcdb83c1233cd870f513a4867f4c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE