Behavioral task
behavioral1
Sample
1a7b49ae4546acdbb412a076dc818225.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1a7b49ae4546acdbb412a076dc818225.exe
Resource
win10v2004-20231222-en
General
-
Target
1a7b49ae4546acdbb412a076dc818225
-
Size
459KB
-
MD5
1a7b49ae4546acdbb412a076dc818225
-
SHA1
ac5614599a93aa44b760bee86cc6c46215a728f9
-
SHA256
13d7877a3af942a9e65e029aa7762f4053f66fd0c3ff5b693c756d6de4e654ee
-
SHA512
218946c9095a993b9b8b499a4cbe9872cfa2134a740d2c2366e1e2be55028be98014dc4d6417af063ac491d0f48eb16d9e30c72f588297171fa482f1f6c30bfb
-
SSDEEP
12288:fXb1TjQ+p3rbNuqsDBFBygivAIKMV4qljNk2oSP:fXbrp3rbER9rNpIKW4qJWo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a7b49ae4546acdbb412a076dc818225
Files
-
1a7b49ae4546acdbb412a076dc818225.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 451KB - Virtual size: 452KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE