Behavioral task
behavioral1
Sample
1ba77be379e8c57fac200164bab066f8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1ba77be379e8c57fac200164bab066f8.exe
Resource
win10v2004-20231215-en
General
-
Target
1ba77be379e8c57fac200164bab066f8
-
Size
1.8MB
-
MD5
1ba77be379e8c57fac200164bab066f8
-
SHA1
3e1319e381726e70743acee379b5480431f0ff09
-
SHA256
e78b3a6bc403b09b3376935e6a97c8b4584678526fda77f172d6c08e19f6ff49
-
SHA512
8ef8666b4ba0fc6be9fa329a721347e58a9c8a7a217a8b07427f856d525560d7a89f40b98b787171d75fe4ede947ddb4e29bda335a307f5cf2d56a039809fbb6
-
SSDEEP
24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7NxqUkHz:SCqm2Jpr0nNM7Dus7Nx2T
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1ba77be379e8c57fac200164bab066f8
Files
-
1ba77be379e8c57fac200164bab066f8.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 616KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE