Behavioral task
behavioral1
Sample
1328c0420e5f82efa213cf970d9b2fb6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1328c0420e5f82efa213cf970d9b2fb6.exe
Resource
win10v2004-20231215-en
General
-
Target
1328c0420e5f82efa213cf970d9b2fb6
-
Size
56KB
-
MD5
1328c0420e5f82efa213cf970d9b2fb6
-
SHA1
935edb8bfdaf8b438ad7d1a5271fe0d14c3674d2
-
SHA256
fa05a35eb922994a3185771c5b0c58ecf5beca2abbd3d7b5eb9ecec1b9fc671c
-
SHA512
6ef8adb97dfe0e5e3bec38dabc130a4f00503a3a64a0013d346570378d026eae0b055d860a5410896a72afd8ded5d1e09d7eef7659f66fe08c31c8af9951ec54
-
SSDEEP
768:j1Xecc42cTM+RWyKZzAxHHF20PWB2ggj+dYzdtGaKJdm6ltG4fuuS5FJwJIZ7t:xXR2sFR/KRAu0P9i4dtFKyQG4HSJFZ7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1328c0420e5f82efa213cf970d9b2fb6
Files
-
1328c0420e5f82efa213cf970d9b2fb6.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 168KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE