Behavioral task
behavioral1
Sample
1eeb81bf68b0aceb2936782659e4f96b.exe
Resource
win7-20231215-en
General
-
Target
1eeb81bf68b0aceb2936782659e4f96b
-
Size
398KB
-
MD5
1eeb81bf68b0aceb2936782659e4f96b
-
SHA1
acac063576eee6f19dc6d95838e3b922f7b89deb
-
SHA256
6bccccbbc1ad1346c2887407d3bf7758c176c0e5b8ef68f19753e8ea0feeaf12
-
SHA512
d9452eeb57f97a01a22a64421d207c271ce5dc85d8a6e4d48076f6027c1a0a156bad88c0dddc56510e5b3dbf38fe3296200c0d0086b64030e8a53e4436619398
-
SSDEEP
6144:SmaKVBGmE84IMNv55giU0pKiFYHxfx15RvOagakZBxkTN2gmeGcFnVQb/DAYbDgx:LSmLAuEY71fviagATFmebVQDcYcd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1eeb81bf68b0aceb2936782659e4f96b
Files
-
1eeb81bf68b0aceb2936782659e4f96b.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 620KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 370KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE