Behavioral task
behavioral1
Sample
f1de02a12922955a00faa9094cc54a42.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
f1de02a12922955a00faa9094cc54a42.exe
Resource
win10v2004-20240221-en
General
-
Target
f1de02a12922955a00faa9094cc54a42.bin
-
Size
105KB
-
MD5
f1de02a12922955a00faa9094cc54a42
-
SHA1
af6b21938a790012cf1ed908f8dd2b61fe927ddc
-
SHA256
277f93df864f65171bea9cdd0fb74462986ad204e5c9a5c61cf9584d294f460b
-
SHA512
ac7b2bda1f54ac848403ce51f8be41ba0489bb97a8d30f2d7b4f2850c82b619e22f75b68d621ecae2b846c5f002a0fc38f25ab62431f5b32dd98c021edd1fbfa
-
SSDEEP
1536:P8mnK6QFElP6n+gymddpMOtEvwDpjIHsalRn5iF1j6Gks/:1nK6a+qdOOtEvwDpj/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f1de02a12922955a00faa9094cc54a42.bin
Files
-
f1de02a12922955a00faa9094cc54a42.bin.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 20KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ap0x Size: 1024B - Virtual size: 785B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE