Behavioral task
behavioral1
Sample
1dcd0b29ae5b12d7484d5368c563ac12.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1dcd0b29ae5b12d7484d5368c563ac12.exe
Resource
win10v2004-20231215-en
General
-
Target
1dcd0b29ae5b12d7484d5368c563ac12
-
Size
1.8MB
-
MD5
1dcd0b29ae5b12d7484d5368c563ac12
-
SHA1
8c86142cd87570ec7191e714025f0bebb56aad4c
-
SHA256
22e97ce8fb0acbf121b8fc9a257544fc6b18fa6793310205111d59eabfc70a30
-
SHA512
919e9c87db7e489c80b7c675e6adb1b672c86eec7aa6d4c6b3b7367f7c32a600ef9dfcbea8c00ef65e05e16ed1a6ef9521c686fbfc12742d6ca3854fdfdc8799
-
SSDEEP
24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7NxqUkHs:SCqm2Jpr0nNM7Dus7Nx2M
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1dcd0b29ae5b12d7484d5368c563ac12
Files
-
1dcd0b29ae5b12d7484d5368c563ac12.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 616KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE