Behavioral task
behavioral1
Sample
185da4197997f9e0a78881d0d4e6c6d64c2f798cd349b2a6cbe31eaebd941308.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
185da4197997f9e0a78881d0d4e6c6d64c2f798cd349b2a6cbe31eaebd941308.exe
Resource
win10v2004-20240426-en
General
-
Target
185da4197997f9e0a78881d0d4e6c6d64c2f798cd349b2a6cbe31eaebd941308
-
Size
2.8MB
-
MD5
67f1100c0789c51bdbb57961ff4748fb
-
SHA1
195ce49e222e7770836fd5a98ebeaf2b0002870b
-
SHA256
185da4197997f9e0a78881d0d4e6c6d64c2f798cd349b2a6cbe31eaebd941308
-
SHA512
bde6afd9ce1b72d9187003228c73daf9afffe11b76c09e9b127c1d4b01e45f6ddfb9cb3e322bf455b0b5ed14600e9e4bb39f4e4317f857c3230a666424dce384
-
SSDEEP
49152:/tmpoMxjQXxfQYuktLR0Wsy2/7VnTHd6dF0WmHGF3qaGif1VzLTlsM3eLvL1qIQ3:/trbsy2/pwdFnmNGqMDX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 185da4197997f9e0a78881d0d4e6c6d64c2f798cd349b2a6cbe31eaebd941308
Files
-
185da4197997f9e0a78881d0d4e6c6d64c2f798cd349b2a6cbe31eaebd941308.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 10.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 65KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE