Behavioral task
behavioral1
Sample
1e6909b09813cd6bd5f3e976e05fbcd4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1e6909b09813cd6bd5f3e976e05fbcd4.exe
Resource
win10v2004-20231215-en
General
-
Target
1e6909b09813cd6bd5f3e976e05fbcd4
-
Size
30KB
-
MD5
1e6909b09813cd6bd5f3e976e05fbcd4
-
SHA1
b29aa48cf19cb095a83b2772f5e8a3a2eebd5d61
-
SHA256
dcbcc7d53fdafa308acac28ab31999bd8b34dcc793676bb5bf41c3b4bbe694ee
-
SHA512
7adec26d22dc61c6d8a899bfafb2ceb4fa2cc0d1cb346d45836d9a5d46b17079ba18871aa042af3bfc17fdbdcefc9919c0138520396822f2e0f3874a4465dbe1
-
SSDEEP
768:XocAX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIocVSEFZt:SKcR4mjD9r823FD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1e6909b09813cd6bd5f3e976e05fbcd4
Files
-
1e6909b09813cd6bd5f3e976e05fbcd4.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE