Behavioral task
behavioral1
Sample
f244231a971de671a298b69d992ecd007a0bd2f032b7411266d3570608dd148e.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f244231a971de671a298b69d992ecd007a0bd2f032b7411266d3570608dd148e.exe
Resource
win10v2004-20241007-en
General
-
Target
f244231a971de671a298b69d992ecd007a0bd2f032b7411266d3570608dd148e
-
Size
116KB
-
MD5
6189d52bebd7c71161b0af5b85023db4
-
SHA1
3d114478369b49eebc4aa79b0f23d36dcd51402f
-
SHA256
f244231a971de671a298b69d992ecd007a0bd2f032b7411266d3570608dd148e
-
SHA512
a89dea02de678d791170ed5afcee59d9e3b6291fc4d50d29b57565e64853f8cb3db434f95255bf4e54c723c46f238a47742617d57df5f05948e5b4839450bf6d
-
SSDEEP
1536:V7Zf/FAxTWoJJ7TyGsGJKnrf7Zf/FAxTWoJJ7TyGsGJKnrF:fny1XKxny1XKZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f244231a971de671a298b69d992ecd007a0bd2f032b7411266d3570608dd148e
Files
-
f244231a971de671a298b69d992ecd007a0bd2f032b7411266d3570608dd148e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE