Behavioral task
behavioral1
Sample
1371f8b6a4150e95ec2b5b734bb36477.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1371f8b6a4150e95ec2b5b734bb36477.exe
Resource
win10v2004-20231215-en
General
-
Target
1371f8b6a4150e95ec2b5b734bb36477
-
Size
5KB
-
MD5
1371f8b6a4150e95ec2b5b734bb36477
-
SHA1
088bb22544f39e493e3030dd19191f5d2bc6ec3b
-
SHA256
e4c6bc9e61e39f2cc76061c0c35b254ded91b833896f0dfc00be2a3fcfd85bca
-
SHA512
254f33d4c599b41240a3b7e2efd21c3689fff5d31722b47e5562e328a7249de671075ab63c817737a36a8304db86ac77792811a1e70d48b2ca102f11bcdb5ab8
-
SSDEEP
96:86zs1GnF24y6csf3PR69zHE7zAjMQFJN4H4i37j5UEVq1SzrhvGTC8ZZpmz2:3s1424yQf3P+DE7zVQFb4HcEVySzdroN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1371f8b6a4150e95ec2b5b734bb36477
Files
-
1371f8b6a4150e95ec2b5b734bb36477.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE