Behavioral task
behavioral1
Sample
19a535524bfa482cb9f6757dc76a236e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
19a535524bfa482cb9f6757dc76a236e.exe
Resource
win10v2004-20231222-en
General
-
Target
19a535524bfa482cb9f6757dc76a236e
-
Size
22KB
-
MD5
19a535524bfa482cb9f6757dc76a236e
-
SHA1
81373b9a2714e471d3a7ebc20a4d1e2921ec52e8
-
SHA256
6e3d62cbf15844d6f6892bfc907af52d463053a234550d6d8b8d3fa3fc357521
-
SHA512
a786f11cb7e184f13cc89b4ed69d60ad518870bb1121300c946eea8147bd725f5f2181f7c37f77d9ce89ba2ac8cd438df9d0b713d4ac01b2aec87e13d4d618df
-
SSDEEP
384:qbCEXMMADQIrUeNFwx9E5xtT6fkCMst8AdxIiv4dK8y8KG8szTO4Am7UnwtzwGbr:O1NAUsbxtT6sFst/3IrdlLUwf6jinbcx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 19a535524bfa482cb9f6757dc76a236e
Files
-
19a535524bfa482cb9f6757dc76a236e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE