Behavioral task
behavioral1
Sample
1101a77357f9a4d2356f592d97e77df0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1101a77357f9a4d2356f592d97e77df0.exe
Resource
win10v2004-20231215-en
General
-
Target
1101a77357f9a4d2356f592d97e77df0
-
Size
1.5MB
-
MD5
1101a77357f9a4d2356f592d97e77df0
-
SHA1
56fa610fed26513e7b468094b07e65076e429e05
-
SHA256
6f1c7e177a3b8ddf9a1e50192597daeab4804af0854c2f8eb881a00145b59057
-
SHA512
c028a3cc7ebf02c4920d5226df24a72e959f6dc552055754a32d7d80418f45611cc70ab6b8fde4ab1cfef361b97862fd2c1278d7e9164197bd0f08d9d357339d
-
SSDEEP
24576:LbE44peVPN7TXxtXhGxUC33/QBiuQMle3nBnAQXo025W:HbF3vXxtXhGd3ozQMsU025
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1101a77357f9a4d2356f592d97e77df0
Files
-
1101a77357f9a4d2356f592d97e77df0.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE