Behavioral task
behavioral1
Sample
138d3917a9efbfb3eb148f48f8809289.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
138d3917a9efbfb3eb148f48f8809289.exe
Resource
win10v2004-20240611-en
General
-
Target
138d3917a9efbfb3eb148f48f8809289.bin
-
Size
218KB
-
MD5
138d3917a9efbfb3eb148f48f8809289
-
SHA1
55a6214a0431294e2d1bb41e6d7eee01aa680b5b
-
SHA256
65845890a7c813d1e468ac3a2774856207db4747c1651bfd96f35d0b4710bc89
-
SHA512
e916da7827cb24b8db9933b0a1d09731ed52c1358fd52f5907e393d0e4cb5795f19a2e3557bea2429a902244dbdd90a5886d1065b7bee74f58b6638b4a4051a6
-
SSDEEP
6144:mZC4d3lbxc6wU/UP+XhdMRFD3LAwekb8+SRtoS8m:P4dMRU/UP4heFjLDF4+SjoS8m
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 138d3917a9efbfb3eb148f48f8809289.bin
Files
-
138d3917a9efbfb3eb148f48f8809289.bin.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 268KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE