Behavioral task
behavioral1
Sample
1f81a57938b0bbbfe43a88b4bf79c92a.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
1f81a57938b0bbbfe43a88b4bf79c92a.exe
Resource
win10v2004-20231201-en
General
-
Target
1f81a57938b0bbbfe43a88b4bf79c92a
-
Size
7.7MB
-
MD5
1f81a57938b0bbbfe43a88b4bf79c92a
-
SHA1
406be404406e153e96ca2cceb171282e83aeffe6
-
SHA256
f1c63f0f6808252d99203b9b251664829f0b1c9586607b5da2a9b87930c6d9a3
-
SHA512
3e8f869b307c9fd49e4852862a58b7410c0acc7684a94e186ba161d81350ea59aeeb5785b352a45e66d2cda383a53a7ad86bcd1e7f4d4f5a1a9bf82e8632e0a6
-
SSDEEP
196608:PbPk5HyC8k5h/wDdEoNiV4I/WWwA7mFMgkbPk5HyC8k5h/wDdEoNiV4I/WWwA7mR:PbPk5HPhJCFMgkbPk5HPhJCFMg
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1f81a57938b0bbbfe43a88b4bf79c92a
Files
-
1f81a57938b0bbbfe43a88b4bf79c92a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE