Behavioral task
behavioral1
Sample
1e974caf7d6f9581c5198d892bee485a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1e974caf7d6f9581c5198d892bee485a.exe
Resource
win10v2004-20231215-en
General
-
Target
1e974caf7d6f9581c5198d892bee485a
-
Size
2.7MB
-
MD5
1e974caf7d6f9581c5198d892bee485a
-
SHA1
7de1cd770795579d5c66b30ac2c2ee89aeea8997
-
SHA256
66c90f4609d6859d6ac8a417ad7e0d7245be8d66569e608b15a0a9fe3094922f
-
SHA512
92b0999e96cc107d35cbddc4449f2077b0450216b8328f348b9f392a4aacd5f06f2d1d0812bf7cd8bdcf87b647a41f7a8ed8ce62fcb5261337b14551a78e6669
-
SSDEEP
49152:LXfOk9d3xkBoC2gFJGhDII71vbR9TJdlB4011X3rTEK4lhVMqJtKZJhJX9HR9j:LXmkeLnG2AHTJdzz1HrYK4nm6+JhJX9j
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1e974caf7d6f9581c5198d892bee485a
Files
-
1e974caf7d6f9581c5198d892bee485a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 141KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE