Behavioral task
behavioral1
Sample
1496279b96464a36c53e8c42e6ad3d45.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1496279b96464a36c53e8c42e6ad3d45.exe
Resource
win10v2004-20231215-en
General
-
Target
1496279b96464a36c53e8c42e6ad3d45
-
Size
266KB
-
MD5
1496279b96464a36c53e8c42e6ad3d45
-
SHA1
8d238138aa280e1a06da0b6037689898521ef0d7
-
SHA256
99ca61665f5117ce136cd9cf77d78689f81c8992183865c55c2843d8638d7440
-
SHA512
4cc6200053d41e0723dd27cc0520fc773c8eee0c73258ee23b11c0ac62dd0cae5dba9979b92a4e86d31fe011ebb89805aedd911aac0eded6a6bc675c0d3b5de3
-
SSDEEP
6144:nob3kAegMKlCg/zaAIN+E2VayTkzWYo3lA5mkF10nBVbep+ovgQ:obgg0gr5INQay4zo3APOnbtgJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1496279b96464a36c53e8c42e6ad3d45
Files
-
1496279b96464a36c53e8c42e6ad3d45.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE