Behavioral task
behavioral1
Sample
1097ca9d11ddad84b9d9bb57be6a4e07.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1097ca9d11ddad84b9d9bb57be6a4e07.exe
Resource
win10v2004-20231215-en
General
-
Target
1097ca9d11ddad84b9d9bb57be6a4e07
-
Size
405KB
-
MD5
1097ca9d11ddad84b9d9bb57be6a4e07
-
SHA1
5ab38dd84bdf7412cecd7c73ad8cc0f621031def
-
SHA256
f0700e4f70d63aebc88121ec24664b682fe3142f5ad110f9adef1df96d92566c
-
SHA512
4d6958c7d68371212b25c1a4ce6382c9fc94a347f6a9cdae0d7ef34592ff946be4cd1ccf377e0383e3eda01636771a7c117d3b878d67aca588bbfc4dd8eeb584
-
SSDEEP
6144:/zShowE6uAc8wiUser2Vmw1j+UQNmoWyvnj8vDLnRVaM3e/0Ll3AuNe43phDQmv6:/zg2v1izoXw1az7g9AUlQwe4Zo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1097ca9d11ddad84b9d9bb57be6a4e07
Files
-
1097ca9d11ddad84b9d9bb57be6a4e07.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE