Behavioral task
behavioral1
Sample
1ff5c49e384f13df907fb1a817f0c71f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1ff5c49e384f13df907fb1a817f0c71f.exe
Resource
win10v2004-20231215-en
General
-
Target
1ff5c49e384f13df907fb1a817f0c71f
-
Size
303KB
-
MD5
1ff5c49e384f13df907fb1a817f0c71f
-
SHA1
c47c52cbd2ce0d001f5551d9c273b024964a10c6
-
SHA256
b6660432f02e84f9cc7f4a4b138569df43c00b58486b53cb65faf8c381aea1bb
-
SHA512
f583f5160f43b2ece4960be1275c8bb013967e9b0ce9b479dadef69acc4d4a438cd36d1382169dc4bef9e24ffc568b5b5cdebbe5039324356e5063dc2d4a1b12
-
SSDEEP
3072:Cz0/SmszzZwRZcJD/+j8t4aCb4NZpOjuy:CKsxnD/raaS4PpG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1ff5c49e384f13df907fb1a817f0c71f
Files
-
1ff5c49e384f13df907fb1a817f0c71f.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 176KB - Virtual size: 176KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 121KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE