Behavioral task
behavioral1
Sample
2023094c9210b36934978c65a5063e9bc52387ae0b15a9a96cd8096df9a392c7.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2023094c9210b36934978c65a5063e9bc52387ae0b15a9a96cd8096df9a392c7.exe
Resource
win10v2004-20240802-en
General
-
Target
2023094c9210b36934978c65a5063e9bc52387ae0b15a9a96cd8096df9a392c7
-
Size
172KB
-
MD5
22670872758690468eb3e8395cdb6231
-
SHA1
c2d70009d888af662982fe4bcc7be3268a0fce39
-
SHA256
2023094c9210b36934978c65a5063e9bc52387ae0b15a9a96cd8096df9a392c7
-
SHA512
5d2f3c2f310373ba4e7cfa5e9a7f7267c3dc5161200d4e6cef989a7b64fb0da2c03196fc9b3cca074affb9ccb207bc8d3ac99f5f8df6c5b092800a2a2c3c14ff
-
SSDEEP
1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8IZf2XcqvcYGTWn1++PJHJXA/OsIZfzcH:fnyiQSo7Zf2XsQSo7Zf2XN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2023094c9210b36934978c65a5063e9bc52387ae0b15a9a96cd8096df9a392c7
Files
-
2023094c9210b36934978c65a5063e9bc52387ae0b15a9a96cd8096df9a392c7.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE