Behavioral task
behavioral1
Sample
1c4fee74d4f05537290554431eb4d2e7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1c4fee74d4f05537290554431eb4d2e7.exe
Resource
win10v2004-20231215-en
General
-
Target
1c4fee74d4f05537290554431eb4d2e7
-
Size
5KB
-
MD5
1c4fee74d4f05537290554431eb4d2e7
-
SHA1
63f96600ecf63d062ad8e1bfdce1f72be50dd75e
-
SHA256
ea00d2e18b3c5f5d34137d692b9f679a753a736f544a8775aec7cec2ca4bd817
-
SHA512
b870600fb979f34886da98ee0ec269241a87a8661704146142fefbff30e4a6b5cc95d232da2d3f2e1254e9988caefa58230c81dd7dea9757b08f6fd01d1acf69
-
SSDEEP
96:86zslokNQJPCuwwhz0zNjDndeSL+mAw15igJGYQpOFbPCs9WTCkwxzEjmcPm72ej:3sTYhAvndeSqNwz4xkCTIZotneP4Xfy
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c4fee74d4f05537290554431eb4d2e7
Files
-
1c4fee74d4f05537290554431eb4d2e7.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE