Behavioral task
behavioral1
Sample
1f0d93d0cb1b24c7776ee36d6de561186de9d37b296780e26efe87a5af1dda8c.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
1f0d93d0cb1b24c7776ee36d6de561186de9d37b296780e26efe87a5af1dda8c.exe
Resource
win10v2004-20230703-en
General
-
Target
1f0d93d0cb1b24c7776ee36d6de561186de9d37b296780e26efe87a5af1dda8c
-
Size
7.1MB
-
MD5
05df23e51803d432317309f85f2c47e7
-
SHA1
aef4d13bd4d5623d1428da270888d9629f317034
-
SHA256
1f0d93d0cb1b24c7776ee36d6de561186de9d37b296780e26efe87a5af1dda8c
-
SHA512
8ddaca31bd27782fcd91edef09b428926923a5e183522fdf7c7b48a31ae5a261b1e341932a3f6cd05dcf99627d818b9b48624fd704f2def63d5fa859db929e54
-
SSDEEP
98304:ZnOVWGX+/RVj1+wvRXeBGhasADkX7au0no9fvX39bGY:ROVW4UQwvRpEsADkX7auGoNT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1f0d93d0cb1b24c7776ee36d6de561186de9d37b296780e26efe87a5af1dda8c
Files
-
1f0d93d0cb1b24c7776ee36d6de561186de9d37b296780e26efe87a5af1dda8c.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 7.1MB - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 80KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE