Behavioral task
behavioral1
Sample
345d82c1d3795b2013f7bf03130e880a7095e281967739e06a2f4fcca3f95b19.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
345d82c1d3795b2013f7bf03130e880a7095e281967739e06a2f4fcca3f95b19.exe
Resource
win10v2004-20240508-en
General
-
Target
345d82c1d3795b2013f7bf03130e880a7095e281967739e06a2f4fcca3f95b19
-
Size
13.6MB
-
MD5
7f77b20e012813a60732ee22a6edee62
-
SHA1
1de3603c1e8b57716899a87a741b38547e5d589a
-
SHA256
345d82c1d3795b2013f7bf03130e880a7095e281967739e06a2f4fcca3f95b19
-
SHA512
42cec0b768c60fa6ec49fa242dbeca3c851d38b008d644ce4ab43c2e449703c90fb9977d5f52234903b3a8c66ec7ce9f69b1866d80b32cd93629527280979731
-
SSDEEP
98304:YXsL1CwPQGKj8nOe/H5Nw9rlP6q+PybSgGGQgYkuOGCe4scLl4e8PiKFvUk:0KPKj8nMNZ6HPy+gG7gNGPcL+e8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 345d82c1d3795b2013f7bf03130e880a7095e281967739e06a2f4fcca3f95b19
Files
-
345d82c1d3795b2013f7bf03130e880a7095e281967739e06a2f4fcca3f95b19.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 8.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 13.3MB - Virtual size: 13.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 284KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE