Behavioral task
behavioral1
Sample
01c94bff4e8de539a3ec403ce1924096.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
01c94bff4e8de539a3ec403ce1924096.exe
Resource
win10v2004-20231215-en
General
-
Target
01c94bff4e8de539a3ec403ce1924096
-
Size
1.3MB
-
MD5
01c94bff4e8de539a3ec403ce1924096
-
SHA1
2969367fcc8d1e942cded555b616c23ede3eb256
-
SHA256
0124bc0f940f77a22e8eb645667b6417012e129658064d1b8e2bcf8e3d4cdc76
-
SHA512
66c0cb67124420bb2fcf46df6463a97ea589b20c5e8dd51f505c59e80cf7061094cf10f7bb8d478123d241579150b7215205f6a248a21688b266d401235bf43c
-
SSDEEP
24576:c95ooKw0UYoVJ5jbUVlAUGwNbwPWnuCXnw8I6TvvtBJ+d9pu80roJvKeSWta3t4O:CWoKw0UYiJ5jbo5GqbwPWnuCXnbRTHtf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 01c94bff4e8de539a3ec403ce1924096
Files
-
01c94bff4e8de539a3ec403ce1924096.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE