Behavioral task
behavioral1
Sample
26e511f4fbfc320ca0580fe8a270268d.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
26e511f4fbfc320ca0580fe8a270268d.exe
Resource
win10v2004-20231215-en
General
-
Target
26e511f4fbfc320ca0580fe8a270268d
-
Size
21KB
-
MD5
26e511f4fbfc320ca0580fe8a270268d
-
SHA1
337306cf46d1ac3be7630775ed75e5e4710d1028
-
SHA256
fd468095d9eff278c4479877e0e38626c506c0c7e191d3c9af7648bb740c98ad
-
SHA512
9592670f0d421bd0df36b8a1453d0502541a076688fb643fd854edc5f18fc8b29651148eb9bd469b2b734708d5b23bc9d2cf4073a51d9fc234c10e89dadd2a3c
-
SSDEEP
192:JoaV34oeS3dt9VpywEGhb8JDFnmnG88DKbTur370hdsk9ElqM:JoIDxVIIb8JDFwbRbw370AyE1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26e511f4fbfc320ca0580fe8a270268d
Files
-
26e511f4fbfc320ca0580fe8a270268d.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE