Behavioral task
behavioral1
Sample
1ee31b1964826512fff69e424ccf7e06.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1ee31b1964826512fff69e424ccf7e06.exe
Resource
win10v2004-20231215-en
General
-
Target
1ee31b1964826512fff69e424ccf7e06
-
Size
17KB
-
MD5
1ee31b1964826512fff69e424ccf7e06
-
SHA1
90003adb2464e271a6d7ef50e4f31f4d7e185b8e
-
SHA256
f718dc94987e04936c3de49dcff18c65e834febee074bbc4d1b155cce849710e
-
SHA512
ef6b1d7ec6598b9da47b62799ebc6b3654537b23243ad146fd8c681894d73097477dcba21a7b2324eefb83c5312488f7a2910ae540e200a77f2a1240ad978320
-
SSDEEP
384:9ZEfjMhk6G+Kbqub3wfJLRgatoFPkoX8Wg75E1SVqce:LEf4hfUquMfjtoF7MnKSV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1ee31b1964826512fff69e424ccf7e06
Files
-
1ee31b1964826512fff69e424ccf7e06.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPXA Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPXB Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE