Behavioral task
behavioral1
Sample
1f166b306bf3d84e52551e6cd23b2ce0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1f166b306bf3d84e52551e6cd23b2ce0.exe
Resource
win10v2004-20231215-en
General
-
Target
1f166b306bf3d84e52551e6cd23b2ce0
-
Size
35KB
-
MD5
1f166b306bf3d84e52551e6cd23b2ce0
-
SHA1
d00c00902ca83e09dbd9f45ac893aaaf20570662
-
SHA256
95e11348e25f131d161f15fb3636cb2185ca60fc9dfb324f43c26d355c306cae
-
SHA512
56d4de10be29eb3ce01c7baeeb0895ebaabd3ed069856e36ea116d6d2be94adf58620b8834e27b4799ec4d08a9a16abeb1afe2bec4fb67d92887452f36e6927c
-
SSDEEP
768:X8Q2ZDX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIom46+Iy:s9Z3KcR4mjD9r8226+D
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1f166b306bf3d84e52551e6cd23b2ce0
Files
-
1f166b306bf3d84e52551e6cd23b2ce0.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE