Behavioral task
behavioral1
Sample
019b8bfd9c1ece89c07e609c3e133dd3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
019b8bfd9c1ece89c07e609c3e133dd3.exe
Resource
win10v2004-20231215-en
General
-
Target
019b8bfd9c1ece89c07e609c3e133dd3
-
Size
46KB
-
MD5
019b8bfd9c1ece89c07e609c3e133dd3
-
SHA1
9b1cfb60110b70ee8decbb2dede0e97b7205fd33
-
SHA256
e041f78d02e3b49bc47aa227fef7e3e8f2cddfe54b5a4b6ca971ce46705349d7
-
SHA512
d913ef4c4ad7e69f2d66a405b345102a19c9e063a32de5ee061ed11140ae4590447f24891358f2a9a83aae8e8a08ce3432298730498ac813d01406d377121434
-
SSDEEP
768:XocAX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIocVSEFWKZkJQ0QjeMdbIWx4O4:SKcR4mjD9r823FWR20WSWxp185w2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 019b8bfd9c1ece89c07e609c3e133dd3
Files
-
019b8bfd9c1ece89c07e609c3e133dd3.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE