Behavioral task
behavioral1
Sample
11e3841a4ddfae7d5ae705ca6b9a6f2b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
11e3841a4ddfae7d5ae705ca6b9a6f2b.exe
Resource
win10v2004-20231215-en
General
-
Target
11e3841a4ddfae7d5ae705ca6b9a6f2b
-
Size
56KB
-
MD5
11e3841a4ddfae7d5ae705ca6b9a6f2b
-
SHA1
02209bd6a461191612096500142565546eaf0365
-
SHA256
03ac9e570ed990ebf72ed636d5fabc8f4943c580ff3f265bbb3ef96b84621ee7
-
SHA512
43d628d210a7e6d36aca0c74afea27f01f131cc41ce91679cfda7bf0f96102974557ffa8f6b0e571bcf1d2d2caf7c7a576ec0d362aa5d91a7d2203998305460b
-
SSDEEP
1536:3NgEYJz6wYC5Sy5lEyBCQozVv5NmnDp1q8Y/:32E8xYC5/lELQ4Vv50s
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 11e3841a4ddfae7d5ae705ca6b9a6f2b
Files
-
11e3841a4ddfae7d5ae705ca6b9a6f2b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 168KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE