Behavioral task
behavioral1
Sample
13cb738a49a976852b3660073c208b7d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
13cb738a49a976852b3660073c208b7d.exe
Resource
win10v2004-20231215-en
General
-
Target
13cb738a49a976852b3660073c208b7d
-
Size
635KB
-
MD5
13cb738a49a976852b3660073c208b7d
-
SHA1
76e4323156c8672f33c2c205bfbe93e720ac1046
-
SHA256
7b91dd58c36ad48162b4a0b5ca909993653b449eab3927f432b72532b35c7bc0
-
SHA512
6383e7e0bdffa92bc01245380dab39a31ce27058c0cdf336ced3bc43334a5f6c3d3e93d117b3f8ac52b04b496ba1ce18199f789f1aa83bcf1ef6c111278af9f5
-
SSDEEP
12288:rUCtKeLADIxJ9rKU3PCH9Eq+0BbSox1Q9:rvtRLADIxJ9rKU3PCHPb92
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 13cb738a49a976852b3660073c208b7d
Files
-
13cb738a49a976852b3660073c208b7d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 224KB - Virtual size: 224KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 71KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE