Behavioral task
behavioral1
Sample
175ac077a4f1acd6b24fa189c741b96c.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
175ac077a4f1acd6b24fa189c741b96c.exe
Resource
win10v2004-20240226-en
General
-
Target
175ac077a4f1acd6b24fa189c741b96c
-
Size
1.5MB
-
MD5
175ac077a4f1acd6b24fa189c741b96c
-
SHA1
11a1c00db83759581669fe42a0b5affff3043da5
-
SHA256
e6104b48463967826658f911726405b81abc15b1eb76b28bbed73386baee7d43
-
SHA512
784794ce5baa6f67e765de9af3a69286b3a157bf2e0a5e29b3cd16c7107f202bdc78316d28d5849f425074735afa6dd16ee30047c52cac6c1bdd342acd5f481a
-
SSDEEP
24576:lUK0iv7P+4feIj4fjopBWCosNoXy2VR5blYXBEkakQC0bOEaGeF3Api2hhqr:+47PH2g8MWFSGyuR5bKikqCcOb3Api2Y
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 175ac077a4f1acd6b24fa189c741b96c
Files
-
175ac077a4f1acd6b24fa189c741b96c.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.g Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qhw Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE