Behavioral task
behavioral1
Sample
19d1f3c1af2dc7958035c76353567509e76cbcb42e4f217b811af77a2e5443fc.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
19d1f3c1af2dc7958035c76353567509e76cbcb42e4f217b811af77a2e5443fc.exe
Resource
win10v2004-20230703-en
General
-
Target
19d1f3c1af2dc7958035c76353567509e76cbcb42e4f217b811af77a2e5443fc
-
Size
1.5MB
-
MD5
b1e4a5e9f44d41f6ebfe6b5ca726b355
-
SHA1
7f72cab47912e7c3cea68b46d04fc4710ed4fd88
-
SHA256
19d1f3c1af2dc7958035c76353567509e76cbcb42e4f217b811af77a2e5443fc
-
SHA512
60380f2153762851d509256c2b6a54989316192bb185c5fade3debca6d137c58b6b3638d82e7c279e56578c10d486034936e42982856926b2d9744b61843d43f
-
SSDEEP
24576:feauN/vv5oMKowiVkzxbFYgC803eIesMPXkYPlw+L4ddYRKHAYj4NyMv8hUKIe7X:fBMnB3Kow0k1FU803e7FM6lw+U3qKWyT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 19d1f3c1af2dc7958035c76353567509e76cbcb42e4f217b811af77a2e5443fc
Files
-
19d1f3c1af2dc7958035c76353567509e76cbcb42e4f217b811af77a2e5443fc.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 829KB - Virtual size: 832KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE