Behavioral task
behavioral1
Sample
1e39c64ba850b0298ab04b9e9c2f69fc.exe
Resource
win7-20231215-en
General
-
Target
1e39c64ba850b0298ab04b9e9c2f69fc
-
Size
402KB
-
MD5
1e39c64ba850b0298ab04b9e9c2f69fc
-
SHA1
1e5f7671e54aa8597ffb3af7fb13e2d0aeaee318
-
SHA256
5ca60c222235db8fcffbd475e7ed5a8d477e7ad251c30c289de58f743750f2e3
-
SHA512
e849cd145f019820b188868c04b3b01bf0f072695350b6fc69025831a68c368979ae7a5756f72a13f7903305dbe1df6fac6f993c63921ff6c32b541580a989b8
-
SSDEEP
6144:zmaKVBGmE84IMNv55giU0pKiFYHxfx15RvOagakZBxkTN2gmeGcFnVQb/DAYbDgl:oSmLAuEY71fviagATFmebVQDcYc5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1e39c64ba850b0298ab04b9e9c2f69fc
Files
-
1e39c64ba850b0298ab04b9e9c2f69fc.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 620KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 370KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE