Behavioral task
behavioral1
Sample
1f8cdba906067ff289f29d27adeb30c0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1f8cdba906067ff289f29d27adeb30c0.exe
Resource
win10v2004-20231215-en
General
-
Target
1f8cdba906067ff289f29d27adeb30c0
-
Size
133KB
-
MD5
1f8cdba906067ff289f29d27adeb30c0
-
SHA1
8865293d6b0ff6a993900ce71ed3efd68bc51ac0
-
SHA256
8213c94a94548667d511f0c141256a222dc36689d97c41f924ccea3c21b8dd1c
-
SHA512
9bb06611e508b3d342945ff29d7ee943b28b9c3294c4e753a7e7af021263fca5ea815caae4c74368c6899f1df97688b60fb22b563231bd92c20fe778eacb3710
-
SSDEEP
3072:5qFuRAeV9faLZrtbdZ0iQDCeKEcQE1r5mNWX9XibJf0gKfSQ:4cAKfaDdqDCeKqE1r5m69XAyZKQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1f8cdba906067ff289f29d27adeb30c0
Files
-
1f8cdba906067ff289f29d27adeb30c0.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE