Behavioral task
behavioral1
Sample
715f0acef3d12b4a7a56a5b7652dd5e1.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
715f0acef3d12b4a7a56a5b7652dd5e1.exe
Resource
win10v2004-20240709-en
General
-
Target
715f0acef3d12b4a7a56a5b7652dd5e1.bin
-
Size
437KB
-
MD5
715f0acef3d12b4a7a56a5b7652dd5e1
-
SHA1
5808bb34a89d0737a98d410c12b776d44a675a22
-
SHA256
e3dd3dde223004daaa54691aad5104c3a8e8887f04a09db330cb03e5775a0449
-
SHA512
fe141d494cf8933c371b45a4e6372c345ff3b43bf7e3c1d0c3b238e2f3549bb1de995ee03c9f9943481c09144e912a865afdb0f5885f045c46aef99e0cdf9304
-
SSDEEP
6144:Ig3LZ4M2S3SmgUMezKGqBxXn8yV3cBwfqQkzylHVAWGJ2jJ7GyHiI6Tz6o/xsxJ3:IPM2kAbjGixX8O3SqHyJ2GoiIfJt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 715f0acef3d12b4a7a56a5b7652dd5e1.bin
Files
-
715f0acef3d12b4a7a56a5b7652dd5e1.bin.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 228KB - Virtual size: 228KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 180KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE