Behavioral task
behavioral1
Sample
994e2070f6885758f859129ef0ed6265.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
994e2070f6885758f859129ef0ed6265.exe
Resource
win10v2004-20231215-en
General
-
Target
994e2070f6885758f859129ef0ed6265
-
Size
281KB
-
MD5
994e2070f6885758f859129ef0ed6265
-
SHA1
1195063cb375b9c0d1738d2b55bebf98264fb477
-
SHA256
bc6cebd0fd9dd1e768ee2e0cbd31ba289436b594684fe1381831aeebcf8eb519
-
SHA512
2b74e9d83f0ab5f1f4c938799fd8bec67310b44d1b0679d39d7a9201a7101c15fbd51de60c8b45b1760c15f2077035a02835ec019457c9f7731e85001bd56ef3
-
SSDEEP
1536:0hv0qOcebbPpN6j8JMEdlM66c+qBxX3s7/ldxCAqwdDbb2Ux3NgRUmvHVGrSXxyC:0fOlIoXoLDqHky9qb49OuS4z6/O
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 994e2070f6885758f859129ef0ed6265
Files
-
994e2070f6885758f859129ef0ed6265.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 220KB - Virtual size: 220KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE