Behavioral task
behavioral1
Sample
18fd0a44abde71c1bdc93cfa0eda1539.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
18fd0a44abde71c1bdc93cfa0eda1539.exe
Resource
win10v2004-20231215-en
General
-
Target
18fd0a44abde71c1bdc93cfa0eda1539
-
Size
3.8MB
-
MD5
18fd0a44abde71c1bdc93cfa0eda1539
-
SHA1
0b516426a796d06b8290fcc3eccf803ff3eef83d
-
SHA256
dd62db388dd493173ab61b5dd8c61d890bbd637c216247550c514125ea2d5d73
-
SHA512
2feadda3f666c24a614d710d3da3558edce65dfd85e15544af5402b6382b75e3de5fd1c0de284c49ab3e1457e98f5fd0dd466d111fc761195e4d46f0b04d00a3
-
SSDEEP
49152:yloWY6pVOruyJHog4tV7eUFnpD5mQcY/3k4r7cBL7Ug0Z6H:ghpV+nJI1VaUFpt7JknQj8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 18fd0a44abde71c1bdc93cfa0eda1539
Files
-
18fd0a44abde71c1bdc93cfa0eda1539.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 179KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE