Behavioral task
behavioral1
Sample
1d13e6ef9ca70980ab82e98323292bce.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1d13e6ef9ca70980ab82e98323292bce.exe
Resource
win10v2004-20231215-en
General
-
Target
1d13e6ef9ca70980ab82e98323292bce
-
Size
142KB
-
MD5
1d13e6ef9ca70980ab82e98323292bce
-
SHA1
ec3ccba09c584f3936f4ac1d45d5833bb129e511
-
SHA256
d4756fe29f597beff3a630e731ef12676ed08679f90bc90623c99b0c8de5a0f6
-
SHA512
16258484637045817f3217cd9d98d5d144ab3ff7c7e1545afb4f5ec714cf88bbed50ee0ba0f58738273653c44cc1442f9bc2a1c60264cf50394972b58c6224d9
-
SSDEEP
3072:4vHADq5R2f1jtnvqnjLrUEuqyrtaPrzmRbc/St4yz82StLp:G8ERmFtninjLrUE3y2K6L282w
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1d13e6ef9ca70980ab82e98323292bce
Files
-
1d13e6ef9ca70980ab82e98323292bce.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 141KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE