Behavioral task
behavioral1
Sample
1111847f780fbe6c0ba6405f4a20aaa8031f520297770b627ed2139d2a807ca5.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
1111847f780fbe6c0ba6405f4a20aaa8031f520297770b627ed2139d2a807ca5.exe
Resource
win10v2004-20230915-en
General
-
Target
1111847f780fbe6c0ba6405f4a20aaa8031f520297770b627ed2139d2a807ca5
-
Size
347KB
-
MD5
400c23148b993fb5c0df5335f571b32f
-
SHA1
409144368a2513d3fa7c377d0038328b93e40dbe
-
SHA256
1111847f780fbe6c0ba6405f4a20aaa8031f520297770b627ed2139d2a807ca5
-
SHA512
1c5244748dfe540eb01b905e8184e3a2782d971123c8c69d336d2e2f2ee8408c4a2bd7338741cc1c8ed2cbb8993ef9e0b9bb83be11a46b005e3a204fff7b0637
-
SSDEEP
6144:Bv59YOYBP9qZDh1nXScyQuL61znEGB7pf5VdmBbMUidUuLr9rkI3GI:Bv5iRBPAFfnXuQuL6hnEGxsMBdUuj2I
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1111847f780fbe6c0ba6405f4a20aaa8031f520297770b627ed2139d2a807ca5
Files
-
1111847f780fbe6c0ba6405f4a20aaa8031f520297770b627ed2139d2a807ca5.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 564KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 274KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 71KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE