Behavioral task
behavioral1
Sample
1b2d2c0c5a700f42a4e952dc0413ec33.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
1b2d2c0c5a700f42a4e952dc0413ec33.exe
Resource
win10v2004-20231201-en
General
-
Target
1b2d2c0c5a700f42a4e952dc0413ec33
-
Size
784KB
-
MD5
1b2d2c0c5a700f42a4e952dc0413ec33
-
SHA1
0460d3a56d5a9f368d11797b9f2436a0e8c728fc
-
SHA256
091178d67e08b8ca543445e275228a03bd20a8427832563633183f617603702c
-
SHA512
9c63bae7d724b20c486b28a0a199c15db0e24839a7a9cd6fb5f1b32bb27ba430de1c60a487603a54eae5f48fb746d6bbd66db2a4c17b3e88881dfcb5b3123c72
-
SSDEEP
24576:/77djgtqT5Zyd9ol7fW7w/sSIWUlJ/Bm5hXr:/J5ZISJ4w/NIWUlJ/sZr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b2d2c0c5a700f42a4e952dc0413ec33
Files
-
1b2d2c0c5a700f42a4e952dc0413ec33.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE