Behavioral task
behavioral1
Sample
1ca8f020ffce398f2c06fd884fd9db78.exe
Resource
win7-20231215-en
General
-
Target
1ca8f020ffce398f2c06fd884fd9db78
-
Size
1.4MB
-
MD5
1ca8f020ffce398f2c06fd884fd9db78
-
SHA1
bd20247662ee081b5e9bfa8bd33014a10415c164
-
SHA256
81225f97a5fe6111ee2416634927c59c8aaa3b85e7002c0a91329d53ea7cc440
-
SHA512
c3f910303a62cc2c50a4a875301ab40f11acd233009f9597f6f8e0a70d6834827adb2e1891c55c6791f3a6584a31abe13c3361326ac76dab9acbf51309541f1d
-
SSDEEP
24576:Y6yJMY9UFoRDhkeYM1jJR97zUbia9JVe0hs5WfBiERJchVML1bT6EW:3Y9UORVOM1jJHzaiape0hsABFRJch6LC
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1ca8f020ffce398f2c06fd884fd9db78
Files
-
1ca8f020ffce398f2c06fd884fd9db78.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE