Behavioral task
behavioral1
Sample
1b292008209a7bac55a974ed330d6420.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1b292008209a7bac55a974ed330d6420.exe
Resource
win10v2004-20231215-en
General
-
Target
1b292008209a7bac55a974ed330d6420
-
Size
696KB
-
MD5
1b292008209a7bac55a974ed330d6420
-
SHA1
895195c648effa324983b8299d469f46c71fe488
-
SHA256
c2650f3845ac8cfc1497fd22b0f8b4f505c81cef7e7c1b4e4d6333604ccae02c
-
SHA512
d068597a34e672f4a3e85068165859b3602923dae3deee89a21bf1e00cb0211e53e2dffcc5c5e1e6a3da74e7bdd76315731a05b4f676b907ca62e2763a41b438
-
SSDEEP
6144:/nRMLXOdGQQB5nGVyfcgm26fudc61WLYFrf:/R8M8BZLkgmNfogIr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b292008209a7bac55a974ed330d6420
Files
-
1b292008209a7bac55a974ed330d6420.exe windows:4 windows x86 arch:x86
b2ab9c868a88adb1bc668cb8d724d018
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
LoadLibraryA
Sections
SDPC Size: 544KB - Virtual size: 544KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SDPD Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SDPI Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE