Behavioral task
behavioral1
Sample
1ef7da15146d239e610cacdfb0dd69e6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1ef7da15146d239e610cacdfb0dd69e6.exe
Resource
win10v2004-20231215-en
General
-
Target
1ef7da15146d239e610cacdfb0dd69e6
-
Size
12KB
-
MD5
1ef7da15146d239e610cacdfb0dd69e6
-
SHA1
ed3335aaf945c73aa47c1e6cd96338f0467a205f
-
SHA256
26912b1db8c7302509d7b3f659a4ea1d524dc4a8e10a62c42ab6fd211fc20ef6
-
SHA512
d6550899d951ff9d22efb0ebac407c011b233521c9e473de201ec9afd2f05f0a50a857d572718bfa5ee26cba42f8caf1bd553ce83c01c71ed23e36b5a5f8addf
-
SSDEEP
192:Ob2vxVrWCF8KTAUYAJy7+MSSGwTwgu2jnXtKeaMRwVzHoTKglMZHOrviMPShx:FZPjNYAijGwTwgu2jXkFzVzHNhsPKx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1ef7da15146d239e610cacdfb0dd69e6
Files
-
1ef7da15146d239e610cacdfb0dd69e6.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE