General
-
Target
c107db5a792be1e4236100e02b10106f244d0d5d8b03cc920550c8c15159761b.exe
-
Size
244KB
-
MD5
a8ac1a0f1af85f39014280fe74309f46
-
SHA1
ebaca8ea422b0cda171dc65b30c505ded7508731
-
SHA256
c107db5a792be1e4236100e02b10106f244d0d5d8b03cc920550c8c15159761b
-
SHA512
82afaec04b50ee9fbf1880477741b148b1784dd46a03454f6da0e39377daa71d2921334b69e1809e01b2e83833161ce9fe15e0976e1a7112a3e966ae681ef644
-
SSDEEP
96:ONmwbaLwxOT5qBRs6Lq1uFFZ7baLwxOT5qBRs6Lq1uFFZ:obaLw4VGsmZ7baLw4VGsmZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c107db5a792be1e4236100e02b10106f244d0d5d8b03cc920550c8c15159761b.exe
Files
-
c107db5a792be1e4236100e02b10106f244d0d5d8b03cc920550c8c15159761b.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 144KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 89KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE