General
-
Target
16bbee3e070983e6afdcde9e15c4ea9499ca19768a21efe423ede10e2806c8a0_3202t.exe
-
Size
379KB
-
MD5
cb71623e4c3ff204d88d5465632f7edf
-
SHA1
f17acf9137eeaf5b1a4877882641c0bc6c331e9a
-
SHA256
8773c966893bdb427a58212fc5268a40a7f57da5c5222eeb869d9b43b68cbafe
-
SHA512
8082da81061c9d02c08b5e995df63be04aa2996f9df21eaf289f4e2a2486f5e261679a32121499ae6d693ee0769f68627666ac4ec6d5430eee3742c6a6d8ed33
-
SSDEEP
6144:QhsZkhMWNFf8LAurlEzAX7oAwfSZ4sXUzQIIS:+UQMCqrllX7XwfEI/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16bbee3e070983e6afdcde9e15c4ea9499ca19768a21efe423ede10e2806c8a0_3202t.exe
Files
-
16bbee3e070983e6afdcde9e15c4ea9499ca19768a21efe423ede10e2806c8a0_3202t.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 86KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.htext Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE