Behavioral task
behavioral1
Sample
1a2b2f0f3e7e0dcb7db800f16da87c5a.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1a2b2f0f3e7e0dcb7db800f16da87c5a.exe
Resource
win10v2004-20231222-en
General
-
Target
1a2b2f0f3e7e0dcb7db800f16da87c5a
-
Size
8KB
-
MD5
1a2b2f0f3e7e0dcb7db800f16da87c5a
-
SHA1
c5085a278e705184f725791ab9f40b553f026277
-
SHA256
e10d392fa62ff320de683c3220c9ca0bdd37412ee40479bdbc861a884ea181c5
-
SHA512
d51365c5e940fdca6e53c51d97a78f1b6662f96d429a925711034c9e25687071f903df419b37009a6649cdc519de34e5abf149426361bb4b60180e3c78d25c50
-
SSDEEP
192:e9+tTSXDZAMc9Xlgz7FaNJhLkwcud2DH9VwGfct1VHO:e9e2Kd9XO1aNJawcudoD7U5u
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a2b2f0f3e7e0dcb7db800f16da87c5a
Files
-
1a2b2f0f3e7e0dcb7db800f16da87c5a.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE