Behavioral task
behavioral1
Sample
1e04c6c7e5037c13acb0827f51c674b4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1e04c6c7e5037c13acb0827f51c674b4.exe
Resource
win10v2004-20231222-en
General
-
Target
1e04c6c7e5037c13acb0827f51c674b4
-
Size
6KB
-
MD5
1e04c6c7e5037c13acb0827f51c674b4
-
SHA1
263f12791ad64568b0a5eb96a25edaa67801e58f
-
SHA256
e6133c942df4b72ef0ca1303a0b2c8dc94c3c187361e68064ee7f7b917d73deb
-
SHA512
8a64d0dbd00433dc21d45b95eb10d8a0fe7ef36e51342bfb22871616bbff8b7fd06e364c32abf52e8fe0cf17d0796a550eba312d3c966883abac7e634db08d33
-
SSDEEP
96:PLpNKtcwMDsbMuLwqChH+nr225ItXFC7N5A5jjAIsNQ+uu4meeHRwGmHqKT7cH:DOSp7sChepoC7A5jjMGu4qwnq2cH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1e04c6c7e5037c13acb0827f51c674b4
Files
-
1e04c6c7e5037c13acb0827f51c674b4.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE