Behavioral task
behavioral1
Sample
1431eb5198c812aed8768b00a6ce215b.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1431eb5198c812aed8768b00a6ce215b.exe
Resource
win10v2004-20231215-en
General
-
Target
1431eb5198c812aed8768b00a6ce215b
-
Size
206KB
-
MD5
1431eb5198c812aed8768b00a6ce215b
-
SHA1
43c0a0c263a7f25af0075b02d39bfe88a03b9c5d
-
SHA256
ec06214eece5d90c5e31af909d9d4d927c6a65aae8975d2d66f871ce60f4c63a
-
SHA512
e2f9cc6eff1ee03dad20c3effcf875d2c176aa2d92dd0e32553e38e9727eb97a9626c1d8f44de7353b485aed6ced3d147b1fd5287ee2c7ae18efb97f3fb8c674
-
SSDEEP
6144:kBWkzV1n3LIC4IDeTtB55AdGdJpnv2vLaE:1kzVVmICTf52dGvpn8r
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1431eb5198c812aed8768b00a6ce215b
Files
-
1431eb5198c812aed8768b00a6ce215b.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 423KB - Virtual size: 424KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE