Behavioral task
behavioral1
Sample
1e20f1f7bfa99a3508848f1b8bc3e0de.exe
Resource
win7-20231215-en
General
-
Target
1e20f1f7bfa99a3508848f1b8bc3e0de
-
Size
388KB
-
MD5
1e20f1f7bfa99a3508848f1b8bc3e0de
-
SHA1
0b4cffc96be1aad349f011e8044134e2af7ab2f5
-
SHA256
5854158f6898eda415c3b46758e05c783342afae5ea644e4fff5afc811576660
-
SHA512
86292d2c3d0e71d2122c137c13018fba4df093b5cc7cb7ce4127cb2f1e8198c938d9800ac427547bc5524bae23dc8a0c86ffde3dd7e3f6422cc75a9bf2859dbb
-
SSDEEP
6144:6805yHbwOUo6RwLfurlHiIsmyh5yCuCak3vSGo4cFpdc/eekNpoSHzeeQ:n05OyrfRHiXhquv7Ypdc/eeqpoSTeeQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1e20f1f7bfa99a3508848f1b8bc3e0de
Files
-
1e20f1f7bfa99a3508848f1b8bc3e0de.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 956KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 315KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE