Behavioral task
behavioral1
Sample
1fec458b620c86001f88592abdd83b00.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1fec458b620c86001f88592abdd83b00.exe
Resource
win10v2004-20231215-en
General
-
Target
1fec458b620c86001f88592abdd83b00
-
Size
5KB
-
MD5
1fec458b620c86001f88592abdd83b00
-
SHA1
cf6ca499a69e5bebe89bee5d2d596f7d86a8edb7
-
SHA256
e596ac375031158c4eb8a1f0c60cc61ccb62f8c7534d4609e2a95e011125e532
-
SHA512
b676ef38052f7c0db67513774db963ed6bf169173bb735897468dcc717050409c86d1dd86852accc4e5b3876eed285762addba2036042bc1e60d22f3571915b9
-
SSDEEP
96:my9fhcMDph5mgoyRP7hQKUnYS51/D/ITX7PJPn8ksGFXby6WzP0Jnml+ICn9:vfXuylOKUnY61/D/ITX7PF8TG1y6kP0L
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1fec458b620c86001f88592abdd83b00
Files
-
1fec458b620c86001f88592abdd83b00.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE