Behavioral task
behavioral1
Sample
1db8eb2a013b321a58642ddd2cfee0a2.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1db8eb2a013b321a58642ddd2cfee0a2.exe
Resource
win10v2004-20231215-en
General
-
Target
1db8eb2a013b321a58642ddd2cfee0a2
-
Size
2.6MB
-
MD5
1db8eb2a013b321a58642ddd2cfee0a2
-
SHA1
3deeb4c5aedd9af52b38fa9472d23493f2d7cc6c
-
SHA256
81392ebc810f6aa599156d0ba3062bf9077b84aa567b168886317dd8ba4a7693
-
SHA512
4828b4cc685c9984e403cc29795440be1453977a0cc59694eccf58877cceba28dbd7bb0a8cba5789e4f65d505054e151fb1a76324eaa823b3f682966bce511a1
-
SSDEEP
49152:dQc9y+neW90BO2HYtfLVtwwwOTGxwPaay3:df7eWCfSZ/wGGz3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1db8eb2a013b321a58642ddd2cfee0a2
Files
-
1db8eb2a013b321a58642ddd2cfee0a2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE