Behavioral task
behavioral1
Sample
1cff5378dc9cd9faa590cb3b84e768f1.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1cff5378dc9cd9faa590cb3b84e768f1.exe
Resource
win10v2004-20231215-en
General
-
Target
1cff5378dc9cd9faa590cb3b84e768f1
-
Size
5.8MB
-
MD5
1cff5378dc9cd9faa590cb3b84e768f1
-
SHA1
47015a1302cfb8f56d18570854f6040015dd08d8
-
SHA256
39279d24c07dd0419b8bdae206a5ad1fa458e1cd52c94893f483febde8c259f5
-
SHA512
85c7b3d9071c95b1b0a65acc69dd9f7a2da157d02b8b01265de1628d27cbc8b392d231d5c540aac63e7e80275411b1e79a4e443daadc5cf408a32fcc3f7b82df
-
SSDEEP
98304:VxZtsVLiEf+J2xQ9+gg3gnl/IVUs1jePsqthvHrFHa7a1gg3gnl/IVUs1jePs:VKVL1QKgl/iBiPftLIagl/iBiP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1cff5378dc9cd9faa590cb3b84e768f1
Files
-
1cff5378dc9cd9faa590cb3b84e768f1.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE