Behavioral task
behavioral1
Sample
1b5f167e28fd5bbe76c1f61a5f76f6c4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1b5f167e28fd5bbe76c1f61a5f76f6c4.exe
Resource
win10v2004-20231215-en
General
-
Target
1b5f167e28fd5bbe76c1f61a5f76f6c4
-
Size
6.3MB
-
MD5
1b5f167e28fd5bbe76c1f61a5f76f6c4
-
SHA1
b5699493f00e85c14cf9434f7ee060d8a413d29d
-
SHA256
b96320984832cf8f1d30c860b5a653db5f5627cbba05ef91a95207a364daaf67
-
SHA512
c2b18b463060be4aa647975c197a02426386a5cd64bf0c7956058303a3dc7379b23c6d20636c80ad7074f2f7a7b9dea2b803251a00ec81378712f684a58f791e
-
SSDEEP
98304:Q1IOkEXnkoV6KdcPhk0SgUvFJI+amPZg369Ibi:D0ky6W+dUv7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b5f167e28fd5bbe76c1f61a5f76f6c4
Files
-
1b5f167e28fd5bbe76c1f61a5f76f6c4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 436KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 294KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE