Behavioral task
behavioral1
Sample
17215f5f74e00b72d97108d0e3ee2e9f93b7d3d8bc7300511ff36a713d5963aa.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
17215f5f74e00b72d97108d0e3ee2e9f93b7d3d8bc7300511ff36a713d5963aa.exe
Resource
win10v2004-20240802-en
General
-
Target
17215f5f74e00b72d97108d0e3ee2e9f93b7d3d8bc7300511ff36a713d5963aa
-
Size
501KB
-
MD5
b4d82d550b2e027755cd34c2847929c7
-
SHA1
aba89d0259733474b17ffd2fd40351b2a694d6f1
-
SHA256
17215f5f74e00b72d97108d0e3ee2e9f93b7d3d8bc7300511ff36a713d5963aa
-
SHA512
e922a1e3a119f8ba484804fb8acc8236a19dfbf599bd44b130f0e626aa9a4f0902a53a8f644bf9012b8839bf46804a96bad8aadba92bcaabbb472bd75b2b5f86
-
SSDEEP
12288:fy8Q+m+A1yc5Beee1y8WkBTM5tf/MIICM545XQ/:68+0qeee08WkZsIC/5A/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17215f5f74e00b72d97108d0e3ee2e9f93b7d3d8bc7300511ff36a713d5963aa
Files
-
17215f5f74e00b72d97108d0e3ee2e9f93b7d3d8bc7300511ff36a713d5963aa.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.WYCao Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ