General
-
Target
ProcessReporterWinpy_Launcher.exe
-
Size
349KB
-
MD5
6d493016ecc478c95e4c1d8cb6188cc8
-
SHA1
411cdd6a8cfced8454ed5a4633559c5b8bb5d58f
-
SHA256
b1f98e9c23640f0eeed82839fa8afb2567cc77016d6633ac78bd0fd05f3cc429
-
SHA512
08e0fb47a228316c2a6fe8a5ca374698b42bb3fa5209f99352084f5ed0d43058535ffb4daae799368cca77560545e41b65ef5b5e3c682e8738adda7769ed90a1
-
SSDEEP
6144:Rz62h9TcFPO31pzXzyU3tekmXaiCBUGpiSopg3y/bxKJyoS:RVh9oo7ZmzW7yVxoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ProcessReporterWinpy_Launcher.exe
Files
-
ProcessReporterWinpy_Launcher.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 828KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 322KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE