Behavioral task
behavioral1
Sample
1b3bdb1af6658e711052799c2bc427b8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1b3bdb1af6658e711052799c2bc427b8.exe
Resource
win10v2004-20231215-en
General
-
Target
1b3bdb1af6658e711052799c2bc427b8
-
Size
460KB
-
MD5
1b3bdb1af6658e711052799c2bc427b8
-
SHA1
6dd6b33af02eeba1d00eb013b188d7e91417cc8b
-
SHA256
dd5d824ba90caf3310446636de391e7ceaa3bdaea5ecfa828427e93c8f9ce533
-
SHA512
7af6086411e8f9dbdfb391b564c4a09e860182b1f60d6a798e0dc2d370babf02b2febe488f5ca200ff0d2dacb0171c8c5a24a369fc893eb242731a3b38fa4783
-
SSDEEP
12288:AKViCKF/zV7/6imRO30ywotkrggYWm3mqbu:AyiCiwiV30yF2rgf9mqbu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b3bdb1af6658e711052799c2bc427b8
Files
-
1b3bdb1af6658e711052799c2bc427b8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 564KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 503KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE