Behavioral task
behavioral1
Sample
1faca8fc8e0f83345837bd3f95698240.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1faca8fc8e0f83345837bd3f95698240.exe
Resource
win10v2004-20231215-en
General
-
Target
1faca8fc8e0f83345837bd3f95698240
-
Size
2.9MB
-
MD5
1faca8fc8e0f83345837bd3f95698240
-
SHA1
0555287d54dae5296a5a2fd318c1b33796a57342
-
SHA256
71db0e36e8f389dd0bff44440bba32d866ad5edebf796b599a90c0c83a4b2d44
-
SHA512
a33e2aaa8cdff633d635e4707453a0d377b17b5f32325240a8ca807925af7be99cf6135ab32a42b30771b92ad3ce088fdc977c455acbc52263d003b7caea2900
-
SSDEEP
49152:O8ZpIF9AW174R3NyYm4rNMK+Om1TmaN74NH5HUyNRcUsCVOzetdZJ:O8ZOP74tNys01N4HBUCczzM3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1faca8fc8e0f83345837bd3f95698240
Files
-
1faca8fc8e0f83345837bd3f95698240.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE