Behavioral task
behavioral1
Sample
11ab01921f436e4f6d2b048f63ed9618.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
11ab01921f436e4f6d2b048f63ed9618.exe
Resource
win10v2004-20231215-en
General
-
Target
11ab01921f436e4f6d2b048f63ed9618
-
Size
394KB
-
MD5
11ab01921f436e4f6d2b048f63ed9618
-
SHA1
a7d5de46ee7e117241bdd102a3124af03ef6d0a7
-
SHA256
5c0cd058b7db62844f6b0999947c820f57bd8e61cd9b178ef6bdab52e90334fd
-
SHA512
21186708a74682aff8dbe4104eefd4fd2555505faa6936c3391e07fae570a3bc6db747d05a4212cca60052333f1180209b8226c022c5df2b4756dbeb348ad32e
-
SSDEEP
6144:xxvGkGemRSgaGm5ENm2eK7mnoUSgpAY8ODcDcm7cIsCup6XJZ4AHJH4+xzLMQy9v:xxvhnmRaG5up6XDBJYQMG/rjV1rS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 11ab01921f436e4f6d2b048f63ed9618
Files
-
11ab01921f436e4f6d2b048f63ed9618.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 232KB - Virtual size: 232KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 147KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE