Behavioral task
behavioral1
Sample
1f39cd485e6cde979a6c2dfaa4a28927.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1f39cd485e6cde979a6c2dfaa4a28927.exe
Resource
win10v2004-20231222-en
General
-
Target
1f39cd485e6cde979a6c2dfaa4a28927
-
Size
2.7MB
-
MD5
1f39cd485e6cde979a6c2dfaa4a28927
-
SHA1
5c1e90b3a61ab2c594277c16ff483553b8dda8fe
-
SHA256
42235ec994e0b5ecf56d662080b90fbca718608b3728ab8b03d4efd15e4f48be
-
SHA512
3e68907a3442c7f7ba23a27e6f9fd4afd636d468b201679e1bb463d0297b98789f5e4229caf27a91d7bd353e15cb8fe39f07a97e092eebfdae34d8dd72f09587
-
SSDEEP
49152:GV4X6PHp+5/hN93PEbNbA5vehPaxckYbugglZA9y03blaYIY1t3LuKp:tkJCEbNOvehPa3YbugKi1sbY1t3LuKp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1f39cd485e6cde979a6c2dfaa4a28927
Files
-
1f39cd485e6cde979a6c2dfaa4a28927.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE