Behavioral task
behavioral1
Sample
1bfbec451b2bbad7c20082611ef4d290.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1bfbec451b2bbad7c20082611ef4d290.exe
Resource
win10v2004-20231215-en
General
-
Target
1bfbec451b2bbad7c20082611ef4d290
-
Size
47KB
-
MD5
1bfbec451b2bbad7c20082611ef4d290
-
SHA1
64dd0a4d196ac2fa761c40570899e1e7d483b550
-
SHA256
74daf8faa55a62ee1274a177b85f9794ab9da68bc0647fd0b2fe259fe913e546
-
SHA512
a9c96941cc8e1a1aeb45ab8793876d2a4b134523c3ff3c76105cc79aec90aa2b5567bb5212d77a61aa80e74e64d2e3ea8bad9ad594fea75f4ef0e92857a0d8a8
-
SSDEEP
768:IKmJE90At3hpF0bYT+yAcRsnoGahQaIcU/a2tRPfP3kbpq3F1Tpgaxf1WRTwA7o:IKskqbnoGaHIc69RPXkbArTpdxmpo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1bfbec451b2bbad7c20082611ef4d290
Files
-
1bfbec451b2bbad7c20082611ef4d290.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 175KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE