Behavioral task
behavioral1
Sample
1fa0d44a49a261b375798cabdfa15f4b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1fa0d44a49a261b375798cabdfa15f4b.exe
Resource
win10v2004-20231222-en
General
-
Target
1fa0d44a49a261b375798cabdfa15f4b
-
Size
854KB
-
MD5
1fa0d44a49a261b375798cabdfa15f4b
-
SHA1
a672565da457d5552a9f6e9ad8bbeae8b7811487
-
SHA256
843b1092bfa57bb3ce0952d672d86d5c3c726749a0da7caf1ccaf896f9af3206
-
SHA512
f114343c28862721cbb6d17e10c7ff8aecd4f354faafb8a8f3e53685315a8e9ed61280621f3c022f6a8b4d07a695ab2508614910c65e9a5d3454a3c6ad7c34cd
-
SSDEEP
24576:hyoM/PiDlpHj0ybS4R42xWl0IodJSWtpp:8oXvHj0HfHbiSWTp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1fa0d44a49a261b375798cabdfa15f4b
Files
-
1fa0d44a49a261b375798cabdfa15f4b.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 5.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 836KB - Virtual size: 840KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE