Behavioral task
behavioral1
Sample
1d1faab562e877bf3cf14ff2c2084fb2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1d1faab562e877bf3cf14ff2c2084fb2.exe
Resource
win10v2004-20231215-en
General
-
Target
1d1faab562e877bf3cf14ff2c2084fb2
-
Size
5KB
-
MD5
1d1faab562e877bf3cf14ff2c2084fb2
-
SHA1
7a96d7a47d35d2fa23ccc47abcdb6231eda9df84
-
SHA256
e68dd6a7f0aa02299a7d6000d044f1a91708352688c6aa93c20667b877e979dc
-
SHA512
67a7d045064b305f9cc0602ca9a42dcbd6f2f42b09f91db64635743adf7169774029765f567f21ac8a814145922f02bc9d002fabb684cbdb0f80d04bef5d252b
-
SSDEEP
96:86zsVb/3E6syfIVYuAfNmcvsSAZBdyM2JBW2ZigpYe/6ljecZ6GZjF9k4hv:3sVbPEIfu3Asd07ZFQ68jF9zJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1d1faab562e877bf3cf14ff2c2084fb2
Files
-
1d1faab562e877bf3cf14ff2c2084fb2.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE