Behavioral task
behavioral1
Sample
1e35564155fe7429460ca5d941d2b24c0b58c98568c50d1de9fe5fcc49c2fedd.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
1e35564155fe7429460ca5d941d2b24c0b58c98568c50d1de9fe5fcc49c2fedd.exe
Resource
win10v2004-20231023-en
General
-
Target
1e35564155fe7429460ca5d941d2b24c0b58c98568c50d1de9fe5fcc49c2fedd
-
Size
389KB
-
MD5
1309532cd41a3fb30ba4cae8b7cb0bd7
-
SHA1
332195d5cee0e1f6fe0d5500922b17dba48eb4d1
-
SHA256
1e35564155fe7429460ca5d941d2b24c0b58c98568c50d1de9fe5fcc49c2fedd
-
SHA512
7c69984f927ab00af9e74f59b135254221ad535237fe91c97e4d253b14ac6052523b9490a3526ba8aa904bede443b4d6494f51f0056791fc9b626295fa523c73
-
SSDEEP
6144:SGz0wJUkCpNLIoSr+i67Cvk92aBJL0Z3rKAjV9N7:1lqkCnIoSaimCM92jpR7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1e35564155fe7429460ca5d941d2b24c0b58c98568c50d1de9fe5fcc49c2fedd
Files
-
1e35564155fe7429460ca5d941d2b24c0b58c98568c50d1de9fe5fcc49c2fedd.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 412KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 333KB - Virtual size: 336KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE