Behavioral task
behavioral1
Sample
1e45b5ae78c679e3d1f19934eb53e3d1.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1e45b5ae78c679e3d1f19934eb53e3d1.exe
Resource
win10v2004-20231222-en
General
-
Target
1e45b5ae78c679e3d1f19934eb53e3d1
-
Size
133KB
-
MD5
1e45b5ae78c679e3d1f19934eb53e3d1
-
SHA1
2488a04c654b72b1f6b4227177727d83342eaa9d
-
SHA256
118afb9a115b29dff119a3f36226de971e780a57e9bef1062d100bcf07148832
-
SHA512
f8d0fcf39997fda91cb0ded90eb41827802eafabb6b04109504e7d32feb8d8150b8fc9b08ac92894f079d01c9a9a2ae0069cf102f445669a1e71649f18d5109c
-
SSDEEP
3072:0YPt9yEUomPDTm0vMm3ioyX//PKfeor71qorsQniQ:0YnUPPpNSCeorModiQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1e45b5ae78c679e3d1f19934eb53e3d1
Files
-
1e45b5ae78c679e3d1f19934eb53e3d1.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE